FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

Django -- multiple vulnerabilities

Affected packages
py310-django32 < 3.2.17
py37-django32 < 3.2.17
py38-django32 < 3.2.17
py39-django32 < 3.2.17
py310-django40 < 4.0.9
py38-django40 < 4.0.9
py39-django40 < 4.0.9
py310-django41 < 4.1.6
py38-django41 < 4.1.6
py39-django41 < 4.1.6

Details

VuXML ID c49a880d-a5bb-11ed-aab5-080027de9982
Discovery 2023-02-01
Entry 2023-02-06

Django reports:

CVE-2023-23969: Potential denial-of-service via Accept-Language headers.

References

CVE Name CVE-2023-23969
URL https://www.djangoproject.com/weblog/2023/feb/01/security-releases/