Vulnerability	Vulnerable Version
M Allocation of Resources Without Limits or Throttling Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in `django.contrib.auth.views.LoginView`, `django.contrib.auth.views.LogoutView`, and `django.views.i18n.set_language()`, whose NFKC operations are inefficient. An attacker can cause degradation of performance by sending requests with a very large number of Unicode characters, which are subject to NFKC normalization. Note: This is only exploitable on Windows. How to fix Allocation of Resources Without Limits or Throttling? Upgrade `Django` to version 5.0.14, 5.1.8, 5.2 or higher.	[,5.0.14)[5.1a1,5.1.8)[5.2a1,5.2)

Allocation of Resources Without Limits or Throttling

Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design.

Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set_language(), whose NFKC operations are inefficient. An attacker can cause degradation of performance by sending requests with a very large number of Unicode characters, which are subject to NFKC normalization.

Note: This is only exploitable on Windows.

How to fix Allocation of Resources Without Limits or Throttling?

Upgrade Django to version 5.0.14, 5.1.8, 5.2 or higher.

[,5.0.14)[5.1a1,5.1.8)[5.2a1,5.2)

Go back to all versions of this package