CVE-2023-46695

2 advisories.

PyPI/django CVE-2023-46695: high 7.5

Django potential denial of service vulnerability in UsernameField on Windows

Action: Upgrade django to 3.2.23 or later.

pip install django==3.2.23

pip install django==4.1.13

pip install django==4.2.7

Affected

introduced	fixed	last affected
3.2a1	3.2.23	-
4.1a1	4.1.13	-
4.2a1	4.2.7	-

Fixed versions

3.2.23

4.1.13

4.2.7

Sources

CVE-2023-46695 · published 2023-11-02T06:30:25Z · modified 2024-09-20T16:07:45.381236Z · JSON

PyPI/django CVE-2023-46695: unknown

An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is su