PYSEC-2025-14
See a problem?- Import Source
- https://github.com/pypa/advisory-database/blob/main/vulns/django/PYSEC-2025-14.yaml
- JSON Data
- https://api.osv.dev/v1/vulns/PYSEC-2025-14
- Aliases
-
- CVE-2025-27556
- GHSA-wqfg-m96j-85vm
- Published
- 2025-04-02T13:15:44Z
- Modified
- 2025-04-09T17:59:30.384298Z
- Summary
- [none]
- Details
-
An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set_language are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.
- References
Affected packages
PyPI / django
Package
- Name
- django
- View open source insights on deps.dev
- Purl
- pkg:pypi/django