CVE-2007-5712
The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- CWE
- CWE-399
- Published
- Modified
- Record from
- the NVD, synced
Affected
- django_project:django
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-9v8h-57gv-qch6 | PyPI | django | >=0.96.0 <0.96.1 | 0.96.1 |
| GHSA-9v8h-57gv-qch6 | PyPI | django | >=0.95 <0.95.2 | 0.95.2 |
| GHSA-9v8h-57gv-qch6 | PyPI | django | >=0.91.0 <0.91.1 | 0.91.1 |
| PYSEC-2007-1 | PyPI | django | <1.1 | 1.1 |