Skip to content
OpenAdvisories
High USN-5837-2 1 CVE

python-django vulnerability

Published Feb 1, 2023 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-5837-1 fixed a vulnerability in Django. This update provides
the corresponding update for Ubuntu 16.04 ESM.

Original advisory details:

Nick Pope discovered that Django incorrectly handled certain
Accept-Language headers. A remote attacker could possibly use this issue to
cause Django to consume memory, leading to a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS python-django 1.8.7-1ubuntu5.15+esm6

Vulnerabilities 1

  • High 7.5
    CVE-2023-23969 EPSS 47%

    Django contains Uncontrolled Resource Consumption via cached header

    In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value o…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2023-23969