Django - 3.2.17

Security

Django 3.2.17 release notes

February 1, 2023

Django 3.2.17 fixes a security issue with severity “moderate” in 3.2.16.

CVE-2023-23969: Potential denial-of-service via Accept-Language headers

The parsed values of Accept-Language headers are cached in order to avoid
repetitive parsing. This leads to a potential denial-of-service vector via
excessive memory usage if large header values are sent.

In order to avoid this vulnerability, the Accept-Language header is now
parsed up to a maximum length.


Details

date
Feb. 1, 2023, 8:59 a.m.
type
Patch
👇
Register or login to:
  • 🔍View and search all Django releases.
  • 🛠️Create and share lists to track your tools.
  • 🚨Setup notifications for major, security, feature or patch updates.
  • 🚀Much more coming soon!
Continue with GitHub
Continue with Google
or