CVE-2025-64460

Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.26 Django versions 5.1 through 5.1.14 Django versions 5.2 through 5.2.8

Description An issue exists in the way Django handles XML input. Specifically, algorithmic complexity within the django.core.serializers.xml serializer.getInnerText() function can lead to a denial-of-service condition. A remote attacker could potentially exhaust CPU and memory resources by providing specially crafted XML input to the XML Deserializer.

Recommendations Update to Django version 5.2.9 or later. Update to Django version 5.1.15 or later. Update to Django version 4.2.27 or later.