CVE-2023-36053

2 advisories.

PyPI/django CVE-2023-36053: high 7.5

Django has regular expression denial of service vulnerability in EmailValidator/URLValidator

Action: Upgrade django to 3.2.20 or later.

pip install django==3.2.20

pip install django==4.1.10

pip install django==4.2.3

Affected

introduced	fixed	last affected
3.2a1	3.2.20	-
4.0a1	4.1.10	-
4.2a1	4.2.3	-

Fixed versions

3.2.20

4.1.10

4.2.3

Sources

CVE-2023-36053 · published 2023-07-03T15:30:45Z · modified 2025-11-04T19:59:10.496692Z · JSON

PyPI/django CVE-2023-36053: unknown

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large numb