[Git][security-tracker-team/security-tracker][master] Add CVE-2023-36053/python-django

[Salvatore Bonaccorso (@carnil)]

Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
b5ca6c74 by Salvatore Bonaccorso at 2023-07-03T19:19:44+02:00
Add CVE-2023-36053/python-django

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -1,3 +1,9 @@
+CVE-2023-36053 [Potential regular expression denial of  service vulnerability in EmailValidator/URLValidator]
+	- python-django <unfixed> (bug #1040225)
+	NOTE: https://www.openwall.com/lists/oss-security/2023/07/03/1
+	NOTE: https://www.djangoproject.com/weblog/2023/jul/03/security-releases/
+	NOTE: https://github.com/django/django/commit/ad0410ec4f458aa39803e5f6b9a3736527062dcd (main)
+	NOTE: https://github.com/django/django/commit/454f2fb93437f98917283336201b4048293f7582 (3.2.20)
 CVE-2023-35797
 	NOT-FOR-US: Hive provider for Apache Airflow
 CVE-2023-3438 (An unquoted Windows search path vulnerability existed in the install t ...)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5ca6c74b5103b3b2ed84c098c330cd0e81ceea1

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/b5ca6c74b5103b3b2ed84c098c330cd0e81ceea1
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20230703/dc82cf63/attachment.htm>