Skip to content
OpenAdvisories
High DSA-5465-1 1 CVE

python-django - security update

Published Aug 3, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 2

ReleasePackageFixed in
Debian · 11 python-django 2:2.2.28-1~deb11u2
Debian · 12 python-django 3:3.2.19-1+deb12u1

Vulnerabilities 1

  • High 7.5
    CVE-2023-36053

    Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

    In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.

    python-django django python-django Debian Ubuntu PyPI