Algorithmic complexity vulnerability in the forms library in Django 1.0 before 1.0.4 and 1.1 before 1.1.1 allows remote attackers to cause a denial of service (CPU consumption) via a crafted (1) EmailField (email address) or (2) URLField (URL) that triggers a large amount of backtracking in a regular expression.
{ "nvd_published_at": "2009-10-13T10:30:00Z", "cwe_ids": [ "CWE-1333", "CWE-400" ], "severity": "HIGH", "github_reviewed": true, "github_reviewed_at": "2024-02-08T22:00:20Z" }