{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/9370?format=json","vulnerability_id":"VCID-a3e2-se1v-2yb5","summary":"An issue was discovered in Django 5.1 before 5.1.8 and 5.0 before 5.0.14. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set_language are subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters.","aliases":[{"alias":"BIT-django-2025-27556"},{"alias":"CVE-2025-27556"},{"alias":"GHSA-wqfg-m96j-85vm"},{"alias":"PYSEC-2025-14"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/203806?format=json","purl":"pkg:deb/debian/python-django@0?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@0%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/203793?format=json","purl":"pkg:deb/debian/python-django@2:2.2.28-1~deb11u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-32d1-b8f2-hud5"},{"vulnerability":"VCID-3ccr-92q5-aqfk"},{"vulnerability":"VCID-63c7-mkxw-ufav"},{"vulnerability":"VCID-92z2-3rbz-77h9"},{"vulnerability":"VCID-ape9-66ck-nfez"},{"vulnerability":"VCID-cg44-thdw-cygg"},{"vulnerability":"VCID-dac4-fa2z-bkdq"},{"vulnerability":"VCID-g22z-jue5-8udz"},{"vulnerability":"VCID-heum-8mwz-sbcw"},{"vulnerability":"VCID-j2uz-w2ur-7ud4"},{"vulnerability":"VCID-jt9m-kd3k-uqca"},{"vulnerability":"VCID-q4cv-2m7d-3qd5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@2:2.2.28-1~deb11u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/203791?format=json","purl":"pkg:deb/debian/python-django@3:3.2.25-0%2Bdeb12u2?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-32d1-b8f2-hud5"},{"vulnerability":"VCID-3ccr-92q5-aqfk"},{"vulnerability":"VCID-63c7-mkxw-ufav"},{"vulnerability":"VCID-92z2-3rbz-77h9"},{"vulnerability":"VCID-ape9-66ck-nfez"},{"vulnerability":"VCID-cg44-thdw-cygg"},{"vulnerability":"VCID-dac4-fa2z-bkdq"},{"vulnerability":"VCID-g22z-jue5-8udz"},{"vulnerability":"VCID-heum-8mwz-sbcw"},{"vulnerability":"VCID-j2uz-w2ur-7ud4"},{"vulnerability":"VCID-jt9m-kd3k-uqca"},{"vulnerability":"VCID-q4cv-2m7d-3qd5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:3.2.25-0%252Bdeb12u2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/203796?format=json","purl":"pkg:deb/debian/python-django@3:4.2.28-0%2Bdeb13u1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-32d1-b8f2-hud5"},{"vulnerability":"VCID-3ccr-92q5-aqfk"},{"vulnerability":"VCID-63c7-mkxw-ufav"},{"vulnerability":"VCID-92z2-3rbz-77h9"},{"vulnerability":"VCID-cg44-thdw-cygg"},{"vulnerability":"VCID-dac4-fa2z-bkdq"},{"vulnerability":"VCID-g22z-jue5-8udz"},{"vulnerability":"VCID-heum-8mwz-sbcw"},{"vulnerability":"VCID-j2uz-w2ur-7ud4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.28-0%252Bdeb13u1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/203794?format=json","purl":"pkg:deb/debian/python-django@3:4.2.30-1?distro=trixie","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3ccr-92q5-aqfk"},{"vulnerability":"VCID-92z2-3rbz-77h9"},{"vulnerability":"VCID-g22z-jue5-8udz"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:4.2.30-1%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/203795?format=json","purl":"pkg:deb/debian/python-django@3:5.2.14-2?distro=trixie","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:deb/debian/python-django@3:5.2.14-2%3Fdistro=trixie"},{"url":"http://public2.vulnerablecode.io/api/packages/43628?format=json","purl":"pkg:pypi/django@5.0.14","is_vulnerable":false,"affected_by_vulnerabilities":[],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.14"},{"url":"http://public2.vulnerablecode.io/api/packages/43627?format=json","purl":"pkg:pypi/django@5.1.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3d6k-rdsh-k7hm"},{"vulnerability":"VCID-7jbt-5zw2-vff2"},{"vulnerability":"VCID-9udu-eqvn-mqbj"},{"vulnerability":"VCID-ax7m-uv4s-zkc1"},{"vulnerability":"VCID-em3c-ceug-cubp"},{"vulnerability":"VCID-fbee-vj2y-cfeb"},{"vulnerability":"VCID-u15a-4ste-43cy"},{"vulnerability":"VCID-vpgq-jhzc-j7h2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.8"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/38479?format=json","purl":"pkg:pypi/django@5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1c7j-evpp-53eb"},{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-68nb-696n-n3bf"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ape9-66ck-nfez"},{"vulnerability":"VCID-ax42-esfz-vud2"},{"vulnerability":"VCID-bjn5-qpmt-qffx"},{"vulnerability":"VCID-bq5s-uknu-z7cn"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-jt9m-kd3k-uqca"},{"vulnerability":"VCID-kv5d-p5n4-r7dp"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-q4cv-2m7d-3qd5"},{"vulnerability":"VCID-sz4x-rr8f-a3hf"},{"vulnerability":"VCID-vm2w-caad-nyd3"},{"vulnerability":"VCID-x4s4-qav9-xbet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/38480?format=json","purl":"pkg:pypi/django@5.0.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1c7j-evpp-53eb"},{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-68nb-696n-n3bf"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ape9-66ck-nfez"},{"vulnerability":"VCID-bjn5-qpmt-qffx"},{"vulnerability":"VCID-bq5s-uknu-z7cn"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-jt9m-kd3k-uqca"},{"vulnerability":"VCID-kv5d-p5n4-r7dp"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-q4cv-2m7d-3qd5"},{"vulnerability":"VCID-sz4x-rr8f-a3hf"},{"vulnerability":"VCID-vm2w-caad-nyd3"},{"vulnerability":"VCID-x4s4-qav9-xbet"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.1"},{"url":"http://public2.vulnerablecode.io/api/packages/38483?format=json","purl":"pkg:pypi/django@5.0.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1c7j-evpp-53eb"},{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-68nb-696n-n3bf"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ape9-66ck-nfez"},{"vulnerability":"VCID-bjn5-qpmt-qffx"},{"vulnerability":"VCID-bq5s-uknu-z7cn"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-jt9m-kd3k-uqca"},{"vulnerability":"VCID-kv5d-p5n4-r7dp"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-q4cv-2m7d-3qd5"},{"vulnerability":"VCID-sz4x-rr8f-a3hf"},{"vulnerability":"VCID-vm2w-caad-nyd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.2"},{"url":"http://public2.vulnerablecode.io/api/packages/39560?format=json","purl":"pkg:pypi/django@5.0.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1c7j-evpp-53eb"},{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-68nb-696n-n3bf"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ape9-66ck-nfez"},{"vulnerability":"VCID-bq5s-uknu-z7cn"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-jt9m-kd3k-uqca"},{"vulnerability":"VCID-kv5d-p5n4-r7dp"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-q4cv-2m7d-3qd5"},{"vulnerability":"VCID-sz4x-rr8f-a3hf"},{"vulnerability":"VCID-vm2w-caad-nyd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.3"},{"url":"http://public2.vulnerablecode.io/api/packages/40733?format=json","purl":"pkg:pypi/django@5.0.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1c7j-evpp-53eb"},{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-68nb-696n-n3bf"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ape9-66ck-nfez"},{"vulnerability":"VCID-bq5s-uknu-z7cn"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-jt9m-kd3k-uqca"},{"vulnerability":"VCID-kv5d-p5n4-r7dp"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-q4cv-2m7d-3qd5"},{"vulnerability":"VCID-sz4x-rr8f-a3hf"},{"vulnerability":"VCID-vm2w-caad-nyd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.4"},{"url":"http://public2.vulnerablecode.io/api/packages/40734?format=json","purl":"pkg:pypi/django@5.0.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1c7j-evpp-53eb"},{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-68nb-696n-n3bf"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ape9-66ck-nfez"},{"vulnerability":"VCID-bq5s-uknu-z7cn"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-jt9m-kd3k-uqca"},{"vulnerability":"VCID-kv5d-p5n4-r7dp"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-q4cv-2m7d-3qd5"},{"vulnerability":"VCID-sz4x-rr8f-a3hf"},{"vulnerability":"VCID-vm2w-caad-nyd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.5"},{"url":"http://public2.vulnerablecode.io/api/packages/40735?format=json","purl":"pkg:pypi/django@5.0.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1c7j-evpp-53eb"},{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-68nb-696n-n3bf"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ape9-66ck-nfez"},{"vulnerability":"VCID-bq5s-uknu-z7cn"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-jt9m-kd3k-uqca"},{"vulnerability":"VCID-kv5d-p5n4-r7dp"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-q4cv-2m7d-3qd5"},{"vulnerability":"VCID-sz4x-rr8f-a3hf"},{"vulnerability":"VCID-vm2w-caad-nyd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.6"},{"url":"http://public2.vulnerablecode.io/api/packages/40736?format=json","purl":"pkg:pypi/django@5.0.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-68nb-696n-n3bf"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-bq5s-uknu-z7cn"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-jt9m-kd3k-uqca"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-q4cv-2m7d-3qd5"},{"vulnerability":"VCID-vm2w-caad-nyd3"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.7"},{"url":"http://public2.vulnerablecode.io/api/packages/41019?format=json","purl":"pkg:pypi/django@5.0.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-jt9m-kd3k-uqca"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.8"},{"url":"http://public2.vulnerablecode.io/api/packages/42455?format=json","purl":"pkg:pypi/django@5.0.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.9"},{"url":"http://public2.vulnerablecode.io/api/packages/43092?format=json","purl":"pkg:pypi/django@5.0.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.10"},{"url":"http://public2.vulnerablecode.io/api/packages/43226?format=json","purl":"pkg:pypi/django@5.0.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.11"},{"url":"http://public2.vulnerablecode.io/api/packages/43492?format=json","purl":"pkg:pypi/django@5.0.12","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.12"},{"url":"http://public2.vulnerablecode.io/api/packages/43495?format=json","purl":"pkg:pypi/django@5.0.13","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-a3e2-se1v-2yb5"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.0.13"},{"url":"http://public2.vulnerablecode.io/api/packages/42453?format=json","purl":"pkg:pypi/django@5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-3d6k-rdsh-k7hm"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-7jbt-5zw2-vff2"},{"vulnerability":"VCID-9udu-eqvn-mqbj"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ax42-esfz-vud2"},{"vulnerability":"VCID-ax7m-uv4s-zkc1"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-em3c-ceug-cubp"},{"vulnerability":"VCID-fbee-vj2y-cfeb"},{"vulnerability":"VCID-jt9m-kd3k-uqca"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-u15a-4ste-43cy"},{"vulnerability":"VCID-vpgq-jhzc-j7h2"},{"vulnerability":"VCID-xmq2-18at-y3gj"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1"},{"url":"http://public2.vulnerablecode.io/api/packages/42454?format=json","purl":"pkg:pypi/django@5.1.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-3d6k-rdsh-k7hm"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-7jbt-5zw2-vff2"},{"vulnerability":"VCID-9udu-eqvn-mqbj"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ax7m-uv4s-zkc1"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-em3c-ceug-cubp"},{"vulnerability":"VCID-fbee-vj2y-cfeb"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-u15a-4ste-43cy"},{"vulnerability":"VCID-vpgq-jhzc-j7h2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.1"},{"url":"http://public2.vulnerablecode.io/api/packages/43089?format=json","purl":"pkg:pypi/django@5.1.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-3d6k-rdsh-k7hm"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-7jbt-5zw2-vff2"},{"vulnerability":"VCID-9udu-eqvn-mqbj"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ax7m-uv4s-zkc1"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-em3c-ceug-cubp"},{"vulnerability":"VCID-fbee-vj2y-cfeb"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-u15a-4ste-43cy"},{"vulnerability":"VCID-vpgq-jhzc-j7h2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.2"},{"url":"http://public2.vulnerablecode.io/api/packages/43090?format=json","purl":"pkg:pypi/django@5.1.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-1umb-2rxg-bbdk"},{"vulnerability":"VCID-3d6k-rdsh-k7hm"},{"vulnerability":"VCID-4vry-9jdm-nyg9"},{"vulnerability":"VCID-7jbt-5zw2-vff2"},{"vulnerability":"VCID-9udu-eqvn-mqbj"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ax7m-uv4s-zkc1"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-em3c-ceug-cubp"},{"vulnerability":"VCID-fbee-vj2y-cfeb"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-u15a-4ste-43cy"},{"vulnerability":"VCID-vpgq-jhzc-j7h2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.3"},{"url":"http://public2.vulnerablecode.io/api/packages/43091?format=json","purl":"pkg:pypi/django@5.1.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3d6k-rdsh-k7hm"},{"vulnerability":"VCID-7jbt-5zw2-vff2"},{"vulnerability":"VCID-9udu-eqvn-mqbj"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ax7m-uv4s-zkc1"},{"vulnerability":"VCID-chey-b3c1-pbe5"},{"vulnerability":"VCID-em3c-ceug-cubp"},{"vulnerability":"VCID-fbee-vj2y-cfeb"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-u15a-4ste-43cy"},{"vulnerability":"VCID-vpgq-jhzc-j7h2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.4"},{"url":"http://public2.vulnerablecode.io/api/packages/43225?format=json","purl":"pkg:pypi/django@5.1.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3d6k-rdsh-k7hm"},{"vulnerability":"VCID-7jbt-5zw2-vff2"},{"vulnerability":"VCID-9udu-eqvn-mqbj"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ax7m-uv4s-zkc1"},{"vulnerability":"VCID-em3c-ceug-cubp"},{"vulnerability":"VCID-fbee-vj2y-cfeb"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-u15a-4ste-43cy"},{"vulnerability":"VCID-vpgq-jhzc-j7h2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.5"},{"url":"http://public2.vulnerablecode.io/api/packages/43493?format=json","purl":"pkg:pypi/django@5.1.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3d6k-rdsh-k7hm"},{"vulnerability":"VCID-7jbt-5zw2-vff2"},{"vulnerability":"VCID-9udu-eqvn-mqbj"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ax7m-uv4s-zkc1"},{"vulnerability":"VCID-em3c-ceug-cubp"},{"vulnerability":"VCID-fbee-vj2y-cfeb"},{"vulnerability":"VCID-nyc2-p1rp-xkb4"},{"vulnerability":"VCID-u15a-4ste-43cy"},{"vulnerability":"VCID-vpgq-jhzc-j7h2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.6"},{"url":"http://public2.vulnerablecode.io/api/packages/43494?format=json","purl":"pkg:pypi/django@5.1.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-3d6k-rdsh-k7hm"},{"vulnerability":"VCID-7jbt-5zw2-vff2"},{"vulnerability":"VCID-9udu-eqvn-mqbj"},{"vulnerability":"VCID-a3e2-se1v-2yb5"},{"vulnerability":"VCID-ax7m-uv4s-zkc1"},{"vulnerability":"VCID-em3c-ceug-cubp"},{"vulnerability":"VCID-fbee-vj2y-cfeb"},{"vulnerability":"VCID-u15a-4ste-43cy"},{"vulnerability":"VCID-vpgq-jhzc-j7h2"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:pypi/django@5.1.7"}],"references":[{"reference_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27556.json","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"}],"url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-27556.json"},{"reference_url":"https://api.first.org/data/v1/epss?cve=CVE-2025-27556","reference_id":"","reference_type":"","scores":[{"value":"0.00011","scoring_system":"epss","scoring_elements":"0.01482","published_at":"2026-05-30T12:55:00Z"}],"url":"https://api.first.org/data/v1/epss?cve=CVE-2025-27556"},{"reference_url":"https://docs.djangoproject.com/en/dev/releases/security","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://docs.djangoproject.com/en/dev/releases/security"},{"reference_url":"https://docs.djangoproject.com/en/dev/releases/security/","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-02T13:21:14Z/"}],"url":"https://docs.djangoproject.com/en/dev/releases/security/"},{"reference_url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"}],"url":"https://ftp.suse.com/pub/projects/security/yaml/suse-cvss-scores.yaml"},{"reference_url":"https://github.com/django/django","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django"},{"reference_url":"https://github.com/django/django/commit/2cb311f7b069723027fb5def4044d1816d7d2afd","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/2cb311f7b069723027fb5def4044d1816d7d2afd"},{"reference_url":"https://github.com/django/django/commit/39e2297210d9d2938c75fc911d45f0e863dc4821","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/39e2297210d9d2938c75fc911d45f0e863dc4821"},{"reference_url":"https://github.com/django/django/commit/8c6871b097b6c49d2a782c0d80d908bcbe2116f1","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/8c6871b097b6c49d2a782c0d80d908bcbe2116f1"},{"reference_url":"https://github.com/django/django/commit/edc2716d01a6fdd84b173c02031695231bcee1f8","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/django/django/commit/edc2716d01a6fdd84b173c02031695231bcee1f8"},{"reference_url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-14.yaml","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2025-14.yaml"},{"reference_url":"https://groups.google.com/g/django-announce","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-02T13:21:14Z/"}],"url":"https://groups.google.com/g/django-announce"},{"reference_url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27556","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27556"},{"reference_url":"https://www.djangoproject.com/weblog/2025/apr/02/security-releases","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://www.djangoproject.com/weblog/2025/apr/02/security-releases"},{"reference_url":"https://www.djangoproject.com/weblog/2025/apr/02/security-releases/","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"Track","scoring_system":"ssvc","scoring_elements":"SSVCv2/E:N/A:Y/T:P/P:M/B:A/M:M/D:T/2025-04-02T13:21:14Z/"}],"url":"https://www.djangoproject.com/weblog/2025/apr/02/security-releases/"},{"reference_url":"http://www.openwall.com/lists/oss-security/2025/04/02/2","reference_id":"","reference_type":"","scores":[{"value":"5.8","scoring_system":"cvssv3.1","scoring_elements":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L"},{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"http://www.openwall.com/lists/oss-security/2025/04/02/2"},{"reference_url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356899","reference_id":"2356899","reference_type":"","scores":[],"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2356899"},{"reference_url":"https://github.com/advisories/GHSA-wqfg-m96j-85vm","reference_id":"GHSA-wqfg-m96j-85vm","reference_type":"","scores":[],"url":"https://github.com/advisories/GHSA-wqfg-m96j-85vm"}],"weaknesses":[{"cwe_id":770,"name":"Allocation of Resources Without Limits or Throttling","description":"The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."},{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."}],"exploits":[],"severity_range_score":"4.0 - 6.9","exploitability":"0.5","weighted_severity":"5.2","risk_score":2.6,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-a3e2-se1v-2yb5"}