Skip to content
OpenAdvisories
High USN-6203-1 1 CVE

python-django vulnerability

Published Jul 5, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

Seokchan Yoon discovered that Django incorrectly handled certain regular
expressions. A remote attacker could possibly use this issue to cause
Django to consume resources, leading to a denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS python-django 2:2.2.12-1ubuntu0.18
Ubuntu · 22.04 LTS 22.04:LTS python-django 2:3.2.12-2ubuntu1.7

Vulnerabilities 1

  • High 7.5
    CVE-2023-36053

    Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

    In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.

    python-django django python-django Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2023-36053