CVE-2023-23969

2 advisories.

PyPI/django CVE-2023-23969: high 7.5

Django contains Uncontrolled Resource Consumption via cached header

Action: Upgrade django to 3.2.17 or later.

pip install django==3.2.17

pip install django==4.0.9

pip install django==4.1.6

Affected

introduced	fixed	last affected
3.2a1	3.2.17	-
4.0a1	4.0.9	-
4.1a1	4.1.6	-

Fixed versions

3.2.17

4.0.9

4.1.6

Sources

CVE-2023-23969 · published 2023-02-01T21:30:23Z · modified 2024-09-20T15:47:43.845538Z · JSON

PyPI/django CVE-2023-23969: unknown

In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-s