Skip to content
OpenAdvisories
Medium DLA-3558-1 1 CVE

python-django - security update

Published Sep 7, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 python-django 1:1.11.29-1+deb10u10

Vulnerabilities 1

  • Medium 5.3
    CVE-2023-41164

    Django Denial of service vulnerability in django.utils.encoding.uri_to_iri

    In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI