The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| Django(PyPI) | 0.96.0 | 0.96.1 | N/A |
| Django(PyPI) | 0.95 | 0.95.2 | N/A |
| Django(PyPI) | 0.91.0 | 0.91.1 | N/A |
CVSS Metrics
