Inefficient Regular Expression Complexity The advisory has been revoked - it doesn't affect any version of package python-django20 (opens in a new tab)

Threat Intelligence

2.98% (86^th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-RHEL10-PYTHONDJANGO20-9893794
published29 Apr 2025
disclosed3 Jul 2023

Report a new vulnerability Found a mistake?

Introduced: 3 Jul 2023

CVE-2023-36053 (opens in a new tab) CWE-1333 (opens in a new tab)

Amendment

The Red Hat security team deemed this advisory irrelevant for RHEL:10.

NVD Description

Note: Versions mentioned in the description apply only to the upstream python-django20 package and not the python-django20 package as distributed by RHEL.

In Django 3.2 before 3.2.20, 4 before 4.1.10, and 4.2 before 4.2.3, EmailValidator and URLValidator are subject to a potential ReDoS (regular expression denial of service) attack via a very large number of domain name labels of emails and URLs.