PT-2026-5880 · Django+3 · Django+3
Jacob Walls
+2
·
Published
2026-02-03
·
Updated
2026-03-10
·
CVE-2025-14550
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions
Django versions 6.0 through 6.0.1
Django versions 5.2 through 5.2.10
Django versions 4.2 through 4.2.27
Django versions 5.0.x and earlier
Django versions 4.1.x and earlier
Django versions 3.2.x and earlier
Description
The
ASGIRequest component is susceptible to a denial-of-service condition. A remote attacker can exploit this by sending a specially crafted request containing duplicate headers.Recommendations
Update Django to version 6.0.2 or later.
Update Django to version 5.2.11 or later.
Update Django to version 4.2.28 or later.
Fix
DoS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Django
Linuxmint
Red Os
Ubuntu