PT-2026-106730

CVE-2026-77050

·

Published

2026-10-06

·

Updated

2026-10-28

Description by

CVSS 4.0
6.9
Medium
MetricsAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Name of the Vulnerable Software and Affected Versions Django versions prior to 6.1.2 Django versions prior to 6.0.9 Django versions prior to 5.2.18
Description The django.utils.translation.get supported language variant() function is susceptible to a denial-of-service attack. This occurs when the system processes a large number of distinct and excessively long language codes, which are then stored as keys in an in-memory cache, leading to excessive process memory consumption.
Recommendations Update Django to version 6.1.2 or later. Update Django to version 6.0.9 or later. Update Django to version 5.2.18 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
OPENSUSE-SU-2026:12086-1
OPENSUSE-SU-2026:12095-1
OPENSUSE-SU-2026:12103-1
OPENSUSE-SU-2026:22196-1
SUSE-SU-2026:4626-1
Found an issue in the description? Have something to add? Feel free to write us 👾