{"action":"Upgrade django to 3.2.17 or later.","affected":[{"fixed":"3.2.17","introduced":"3.2a1"},{"fixed":"4.0.9","introduced":"4.0a1"},{"fixed":"4.1.6","introduced":"4.1a1"}],"component":"django","cve_ids":["CVE-2023-23969"],"ecosystem":"PyPI","epss":0.47381,"exploited":false,"fixed_versions":["3.2.17","4.0.9","4.1.6"],"ghsa_id":"GHSA-q2jf-h9jm-m7p4","id":"tcs_01M5KFV2S97944R8JG6G096NBY","modified_at":"2024-09-20T15:47:43.845538Z","published_at":"2023-02-01T21:30:23Z","references":["https://osv.dev/vulnerability/GHSA-q2jf-h9jm-m7p4","https://nvd.nist.gov/vuln/detail/CVE-2023-23969","https://github.com/django/django/commit/4452642f193533e288a52c02efb5bbc766a68f95","https://github.com/django/django/commit/9d7bd5a56b1ce0576e8e07a8001373576d277942","https://github.com/django/django/commit/c7e0151fdf33e1b11d488b6f67b94fdf3a30614a","https://docs.djangoproject.com/en/4.1/releases/security","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2023-12.yaml","https://groups.google.com/forum/#!forum/django-announce","https://lists.debian.org/debian-lts-announce/2023/02/msg00000.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI","https://security.netapp.com/advisory/ntap-20230302-0007","https://www.djangoproject.com/weblog/2023/feb/01/security-releases"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-q2jf-h9jm-m7p4","url":"https://osv.dev/vulnerability/GHSA-q2jf-h9jm-m7p4"}],"summary":"Django contains Uncontrolled Resource Consumption via cached header"}