{"action":"Upgrade django to 3.2.20 or later.","affected":[{"fixed":"3.2.20","introduced":"3.2a1"},{"fixed":"4.1.10","introduced":"4.0a1"},{"fixed":"4.2.3","introduced":"4.2a1"}],"component":"django","cve_ids":["CVE-2023-36053"],"ecosystem":"PyPI","epss":0.02978,"exploited":false,"fixed_versions":["3.2.20","4.1.10","4.2.3"],"ghsa_id":"GHSA-jh3w-4vvf-mjgr","id":"tcs_01M5KFNY01GS4Q395DDXVSMEBE","modified_at":"2025-11-04T19:59:10.496692Z","published_at":"2023-07-03T15:30:45Z","references":["https://osv.dev/vulnerability/GHSA-jh3w-4vvf-mjgr","https://nvd.nist.gov/vuln/detail/CVE-2023-36053","https://github.com/django/django/commit/454f2fb93437f98917283336201b4048293f7582","https://github.com/django/django/commit/ad0410ec4f458aa39803e5f6b9a3736527062dcd","https://github.com/django/django/commit/b7c5feb35a31799de6e582ad6a5a91a9de74e0f9","https://github.com/django/django/commit/beb3f3d55940d9aa7198bf9d424ab74e873aec3d","https://www.djangoproject.com/weblog/2023/jul/03/security-releases","https://www.debian.org/security/2023/dsa-5465","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZQJOMNRMVPCN5WMIZ7YSX5LQ7IR2NY4D","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/XG5DYKPNDCEHJQ3TKPJQO7QGSR4FAYMS","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NRDGTUN4LTI6HG4TWR3JYLSFVXPZT42A","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZQJOMNRMVPCN5WMIZ7YSX5LQ7IR2NY4D","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XG5DYKPNDCEHJQ3TKPJQO7QGSR4FAYMS","https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/NRDGTUN4LTI6HG4TWR3JYLSFVXPZT42A","https://lists.debian.org/debian-lts-announce/2023/07/msg00022.html","https://groups.google.com/forum/#%21forum/django-announce","https://groups.google.com/forum/#!forum/django-announce","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2023-100.yaml","https://github.com/django/django","https://docs.djangoproject.com/en/4.2/releases/security"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-jh3w-4vvf-mjgr","url":"https://osv.dev/vulnerability/GHSA-jh3w-4vvf-mjgr"}],"summary":"Django has regular expression denial of service vulnerability in EmailValidator/URLValidator"}