Improper Validation of Specified Quantity in Input The advisory has been revoked - it doesn't affect any version of package python-django (opens in a new tab)

Threat Intelligence

1.52% (73^rd percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk IDSNYK-UBUNTU1604-PYTHONDJANGO-5901461
published14 Sept 2023
disclosed3 Nov 2023

Report a new vulnerability Found a mistake?

Introduced: 14 Sep 2023

CVE-2023-41164 (opens in a new tab) CWE-1284 (opens in a new tab)

Amendment

The Ubuntu security team deemed this advisory irrelevant for Ubuntu:16.04.

NVD Description

Note: Versions mentioned in the description apply only to the upstream python-django package and not the python-django package as distributed by Ubuntu.

In Django 3.2 before 3.2.21, 4.1 before 4.1.11, and 4.2 before 4.2.5, django.utils.encoding.uri_to_iri() is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters.