0
0
mirror of https://github.com/django/django.git synced 2024-11-29 06:03:25 +01:00
django/docs/releases/3.2.20.txt

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

15 lines
584 B
Plaintext
Raw Normal View History

===========================
Django 3.2.20 release notes
===========================
*July 3, 2023*
Django 3.2.20 fixes a security issue with severity "moderate" in 3.2.19.
CVE-2023-36053: Potential regular expression denial of service vulnerability in ``EmailValidator``/``URLValidator``
===================================================================================================================
``EmailValidator`` and ``URLValidator`` were subject to potential regular
expression denial of service attack via a very large number of domain name
labels of emails and URLs.