CVE-2025-27556

Name of the Vulnerable Software and Affected Versions Django versions 5.1 before 5.1.8 Django versions 5.0 before 5.0.14

Description An issue was discovered where the NFKC normalization is slow on Windows, making certain views subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters. The affected views include django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set language.

Recommendations For Django versions 5.1 before 5.1.8, update to version 5.1.8 or later. For Django versions 5.0 before 5.0.14, update to version 5.0.14 or later.