tocsin

Debian/python-django: high 7.5

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large n

Action: Upgrade python-django to 3:3.2.25-0+deb12u1 or later.

Affected

introducedfixedlast affected
03:3.2.25-0+deb12u1-

Fixed versions

3:3.2.25-0+deb12u1

Sources

published · modified · JSON