[Snyk: High] django Denial of Service (DoS) (10/6/23)

[cnlucas]

Introduced through
[email protected], [email protected] and others
Fixed in
[email protected], @4.1.11, @4.2.5

Exploit maturity
No known exploit

Detailed paths and remediation

Introduced through: [email protected] › [email protected]
Fix: Upgrade django to version 3.2.21 or 4.1.11 or 4.2.5

Introduced through: [email protected] › [email protected] › [email protected]
Fix: Pin django to version 3.2.21 or 4.1.11 or 4.2.5
Introduced through: [email protected] › [email protected] › [email protected]
Fix: Pin django to version 3.2.21 or 4.1.11 or 4.2.5

…and 8 more
Security information
Factors contributing to the scoring:

Snyk: [CVSS 7.5](https://security.snyk.io/vuln/SNYK-PYTHON-DJANGO-5880505) - High Severity
NVD: Not available. NVD has not yet published its analysis.

Why are the scores different? Learn how Snyk evaluates vulnerability scores
Overview

Affected versions of this package are vulnerable to Denial of Service (DoS) in the django.utils.encoding.uri_to_iri() function when processing inputs with a large number of Unicode characters.

Completion Criteria
[ ] We have either upgraded and removed the vulnerability, or determined we are not affected