Skip to content
OpenAdvisories
High USN-6203-2 1 CVE

python-django vulnerability

Published Jul 25, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

USN-6203-1 fixed a vulnerability in Django. This update provides
the corresponding update for Ubuntu 18.04 ESM.

Original advisory details:

Seokchan Yoon discovered that Django incorrectly handled certain regular
expressions. A remote attacker could possibly use this issue to cause
Django to consume resources, leading to a denial of service.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS python-django 1:1.11.11-1ubuntu1.21+esm1

Vulnerabilities 1

  • High 7.5
    CVE-2023-36053

    Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

    In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.

    python-django django python-django Debian Ubuntu PyPI

References

  • report
    https://ubuntu.com/security/CVE-2023-36053