GHSA-8p8v-wh79-9r56
High · 7.5CVSS
7.5
EPSS
—
Published
Mar 3, 2026
CISA due date
—
The record
Django vulnerable to Uncontrolled Resource Consumption
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | django | 4.2 | 4.2.29 |
| PyPI | django | 5.2 | 5.2.12 |
| PyPI | django | 6.0 | 6.0.3 |
Related vulnerabilities
- CVE-2026-25673 An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Same vulnerability
- GHSA-mjgh-79qc-68w3 Django has a Race Condition vulnerability Also affects django
- CVE-2026-25674 An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Also affects django
- GHSA-6426-9fv3-65x8 Django has an SQL Injection issue Also affects django
- GHSA-gvg8-93h5-g6qq Django has an SQL Injection issue Also affects django
- GHSA-2mcm-79hx-8fxw Django has Observable Timing Discrepancy Also affects django
- GHSA-33mw-q7rj-mjwj Django has Inefficient Algorithmic Complexity Also affects django
- GHSA-4rrr-2h4v-f3j9 Django has Inefficient Algorithmic Complexity Also affects django