| Package | Affected versions | Patched versions |
|---|---|---|
| django | ≥ 3.2, < 3.2.21≥ 4.1, < 4.1.11≥ 4.2, < 4.2.5 | 3.2.214.1.114.2.5 |
| django | ≥ 3.2, < 3.2.21≥ 4.1, < 4.1.11≥ 4.2, < 4.2.5 | 3.2.214.1.114.2.5 |
In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free