Django Regex Algorithmic Complexity Causes Denial of Service

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2009-3695 · ADVISORY
• django/django commit 594a28a · WEB
• django/django commit e3e992e · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/53727 · WEB
• django/django · PACKAGE
• pypa/advisory-database · WEB
• web.archive.org/web/20091013093057/http://secunia.com/advisories/36968 · WEB
• web.archive.org/web/20091017070244/http://secunia.com/advisories/36948 · WEB
• web.archive.org/web/20200228171918/http://www.securityfocus.com/bid/36655 · WEB
• bugs.debian.org/cgi-bin/bugreport.cgi · WEB
• groups.google.com/group/django-users/browse_thread/thread/15df9e45118dfc51

django のその他の脆弱性

• CVE-2026-15830中 5.3An issue was discovered in Django 6.0 before 6.0.9 and 5.2 before 5.2.18. GeoDjango's `django.contrib.gis.geos.GEOSGeometry` is subject to a…
• CVE-2026-15307高 8.8An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8. GeoDjango spatial lookups optimistically parse the right-hand-side…
• CVE-2026-53878中 6.1An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `DomainNameValidator` does not prohibit newlines in domain names (…
• CVE-2026-53877中 4.8An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `django.contrib.gis.gdal.GDALRaster` over-reads its in-memory buff…
• CVE-2026-48588中 5.3An issue was discovered in Django 6.0 before 6.0.7 and 5.2 before 5.2.16. `UpdateCacheMiddleware` and the `cache_page()` decorator cache res…