Skip to content
OpenAdvisories
Medium USN-6378-1 1 CVE

python-django vulnerability

Published Sep 18, 2023 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Django incorrectly handled certain URIs with a very
large number of Unicode characters. A remote attacker could possibly use
this issue to cause Django to consume resources or crash, leading to a
denial of service.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · 20.04 LTS 20.04:LTS python-django 2:2.2.12-1ubuntu0.19
Ubuntu · 22.04 LTS 22.04:LTS python-django 2:3.2.12-2ubuntu1.8

Vulnerabilities 1

  • Medium 5.3
    CVE-2023-41164

    Django Denial of service vulnerability in django.utils.encoding.uri_to_iri

    In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • report
    https://ubuntu.com/security/CVE-2023-41164