Skip to content
OpenAdvisories
High DLA-3306-1 1 CVE

python-django - security update

Published Feb 1, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 python-django 1:1.11.29-1+deb10u6

Vulnerabilities 1

  • High 7.5
    CVE-2023-23969 EPSS 47%

    Django contains Uncontrolled Resource Consumption via cached header

    In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value o…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI