CVE-2009-3695
djangoproject django: no CVSS score yet. EPSS 3.7% chance of exploitation in the next 30 days. Fixed in django 1.0.4, 1.1.1.
Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address) or (2) URLField (URL) that triggers a large amount of backtracking in a regular expression.
- EPSS
- 3.7% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- djangoproject:django
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-p6m5-h7pp-v2x5 | PyPI | django | >=1.0 <1.0.4 | 1.0.4 |
| GHSA-p6m5-h7pp-v2x5 | PyPI | django | >=1.1 <1.1.1 | 1.1.1 |
| PYSEC-2009-4 | PyPI | django | >=1.0 <1.0.4 >=1.1 <1.1.1 | 1.0.4, 1.1.1 |