https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T10:02:24.287258+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2026-07737 bdu:2026-07737 2026-10-02T10:02:24.294554+00:00 bdu:2026-07737 https://cve.radiocsirt.org/vuln/bit-django-2026-25673 BIT-django-2026-25673 — Potential denial-of-service vulnerability in URLField via Unicode normalization on Windows 2026-10-02T10:02:24.294587+00:00

Affected: Bitnami: django

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. `URLField.to_python()` in Django calls `urllib.parse.urlsplit()`, which performs NFKC normalization on Windows that is disproportionately slow for certain Unicode characters, allowing a remote attacker to cause denial of service via large URL inputs containing these characters. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Seokchan Yoon for reporting this issue.

 https://cve.radiocsirt.org/vuln/certfr-2026-avi-1056 certfr-2026-avi-1056 — De multiples vulnérabilités ont été découvertes dans les produits Splunk. Certaines d'entre elles permettent à un attaq… 2026-10-02T10:02:24.294621+00:00 certfr-2026-avi-1056 https://cve.radiocsirt.org/vuln/euvd-2026-337452 EUVD-2026-337452 2026-10-02T10:02:24.294637+00:00 EUVD-2026-337452 https://cve.radiocsirt.org/vuln/fkie_cve-2026-25673 fkie_cve-2026-25673 2026-10-02T10:02:24.294648+00:00

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. `URLField.to_python()` in Django calls `urllib.parse.urlsplit()`, which performs NFKC normalization on Windows that is disproportionately slow for certain Unicode characters, allowing a remote attacker to cause denial of service via large URL inputs containing these characters. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Seokchan Yoon for reporting this issue.

 https://cve.radiocsirt.org/vuln/ghsa-8p8v-wh79-9r56 GHSA-8p8v-wh79-9r56 — Django vulnerable to Uncontrolled Resource Consumption 2026-10-02T10:02:24.294670+00:00

Affected: PyPI: Django

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.

`URLField.to_python()` in Django calls `urllib.parse.urlsplit()`, which performs NFKC normalization on Windows that is disproportionately slow for certain Unicode characters, allowing a remote attacker to cause denial of service via large URL inputs containing these characters.

Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Seokchan Yoon for reporting this issue.

 https://cve.radiocsirt.org/vuln/pysec-2026-2448 PYSEC-2026-2448 — Django vulnerable to Uncontrolled Resource Consumption 2026-10-02T10:02:24.294695+00:00

Affected: PyPI: django

An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29.

`URLField.to_python()` in Django calls `urllib.parse.urlsplit()`, which performs NFKC normalization on Windows that is disproportionately slow for certain Unicode characters, allowing a remote attacker to cause denial of service via large URL inputs containing these characters.

Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Seokchan Yoon for reporting this issue.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-0579 WID-SEC-W-2026-0579 — Django: Mehrere Schwachstellen 2026-10-02T10:02:24.294715+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Django ausnutzen, um einen Denial of Service Angriff durchzuführen oder vertrauliche Informationen offenzulegen.