VDB
Sign up
—

PYSEC-2015-21

Quick fix

PYSEC-2015-21 — django: upgrade to the fixed version with the command below.

pip install --upgrade 'django>=1.8.3'

Details

validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.

Are you affected?

Enter the version of the package you're using.

Affected packages

PyPI/django
Introduced in: 1.8Fixed in: 1.8.3
Fixpip install --upgrade 'django>=1.8.3'

References