Denial Of Service (DoS)

🗓️ 11 Apr 2025 09:10:05Reported by Veracode Vulnerability DatabaseType

Django has a Denial of Service vulnerability from slow Unicode normalization on Windows.

Reporter	Title	Published	Views	Family All 33
GithubExploit	Exploit for CVE-2025-64458	6 Nov 202501:30	–	githubexploit
BDU FSTEC	The vulnerabilities of the LoginView, LogoutView functions, and the set_language() function on the Django web application programming platform allow a hacker to cause a service failure.	30 Apr 202500:00	–	bdu_fstec
Circl	CVE-2025-27556	2 Apr 202513:33	–	circl
CNNVD	Django 安全漏洞	2 Apr 202500:00	–	cnnvd
CVE	CVE-2025-27556	2 Apr 202500:00	–	cve
Cvelist	CVE-2025-27556	2 Apr 202500:00	–	cvelist
Debian CVE	CVE-2025-27556	2 Apr 202500:00	–	debiancve
EUVD	EUVD-2025-9536	3 Oct 202520:07	–	euvd
Fedora	[SECURITY] Fedora 41 Update: python-django5-5.1.10-1.fc41	19 Jun 202501:21	–	fedora
Github Security Blog	Django Potential Denial of Service (DoS) on Windows	2 Apr 202515:31	–	github

Vulners

Node

django_project djangoRange5.1a1–5.1.7python

django_project djangoRange5.0a1–5.0.13python

Source	Link
github	www.github.com/django/django/commit/edc2716d01a6fdd84b173c02031695231bcee1f8
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-27556
github	www.github.com/django/django/commit/8c6871b097b6c49d2a782c0d80d908bcbe2116f1
github	www.github.com/django/django/commit/39e2297210d9d2938c75fc911d45f0e863dc4821
github	www.github.com/django/django/commit/2cb311f7b069723027fb5def4044d1816d7d2afd
openwall	www.openwall.com/lists/oss-security/2025/04/02/2
docs	www.docs.djangoproject.com/en/dev/releases/security
groups	www.groups.google.com/g/django-announce
github	www.github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-14.yaml
djangoproject	www.djangoproject.com/weblog/2025/apr/02/security-releases

13 Dec 2025 07:51Current

7High risk

Vulners AI Score7

CVSS 3.15.8 - 7.5

EPSS0.00928

SSVC