Skip to content
OpenAdvisories
High DLA-3500-1 1 CVE

python-django - security update

Published Jul 19, 2023 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 10 python-django 1:1.11.29-1+deb10u9

Vulnerabilities 1

  • High 7.5

    Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

    In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.