| Package | Affected versions | Patched versions |
|---|---|---|
| django | ≥ 3.2, < 3.2.20≥ 3.2a1, < 3.2.20≥ 4.0, < 4.1.10≥ 4.0a1, < 4.1.10≥ 4.2, < 4.2.3≥ 4.2a1, < 4.2.3 | 3.2.204.1.104.2.3 |
| django | ≥ 3.2, < 3.2.20≥ 4.0, < 4.1.10≥ 4.2, < 4.2.3 | 3.2.204.1.104.2.3 |
In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free