[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2025-14550":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":20,"aliases":21,"duplicate_of":9,"upstream":34,"downstream":35,"duplicates":71,"related":72,"reserved_at":9,"published_at":83,"modified_at":84,"state":85,"summary":86,"references_raw":95,"kevs":173,"epss":174,"epss_history":177,"metrics":452,"affected":468},"CVE-2025-14550","An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28.\n`ASGIRequest` allows a remote attacker to cause a potential denial-of-service via a crafted request with multiple duplicate headers.\nEarlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected.\nDjango would like to thank Jiyong Yang for reporting this issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":18,"capec":19},"CWE-407","Inefficient Algorithmic Complexity","An algorithm in a product has an inefficient worst-case computational complexity that may be detrimental to system performance and can be triggered by an attacker, typically using crafted manipulations that ensure that the worst case is being reached.","weakness","Incomplete","Class","Low",[],[],[22,23,24,25,26,27,28,29,30,31,32,33],"GHSA-33mw-q7rj-mjwj","BIT-django-2025-14550","PYSEC-2026-43","DEBIAN-CVE-2025-14550","CGA-3r7g-f32q-4qx2","CGA-3vg3-7r4q-4q44","CGA-7829-cwm2-jhx7","CGA-cr2f-qrr7-59vg","CGA-hf5w-94w5-jc99","CGA-v233-x6jp-fprp","CGA-w3vc-6g27-gpw5","CGA-xhf4-c94r-ppwp",[],[36,38,40,42,44,46,48,50,52,54,56,57,59,61,63,65,67,69],{"_key":37},"UBUNTU-CVE-2025-14550",{"_key":39},"OPENSUSE-SU-2026:10160-1",{"_key":41},"DSA-6150-1",{"_key":43},"SUSE-SU-2026:0440-1",{"_key":45},"OPENSUSE-SU-2026:10145-1",{"_key":47},"OPENSUSE-SU-2026:10216-1",{"_key":49},"OPENSUSE-SU-2026:10247-1",{"_key":51},"OPENSUSE-SU-2026:20184-1",{"_key":53},"MGASA-2026-0032",{"_key":55},"USN-8009-1",{"_key":25},{"_key":58},"OPENSUSE-SU-2026:11270-1",{"_key":60},"RHSA-2026:14835",{"_key":62},"RHSA-2026:13508",{"_key":64},"RHSA-2026:5970",{"_key":66},"RHSA-2026:5971",{"_key":68},"RHSA-2026:3958",{"_key":70},"RHSA-2026:3959",[],[73,74,75,76,77,78,79,80,81],{"_key":39},{"_key":43},{"_key":45},{"_key":47},{"_key":49},{"_key":51},{"_key":53},{"_key":58},{"_key":82},"CGA-JJ39-8JVF-389J","2026-02-03T14:38:15.875Z","2026-02-03T16:27:38.976Z","Analyzed",{"cisa_kev":87,"cisa_ransomware":87,"cisa_vendor":9,"epss_severity":88,"epss_score":89,"severity":90,"severity_score":91,"severity_version":92,"severity_source":93,"severity_vector":94,"severity_status":85},false,"low",0.01032,"high",7.5,"v3.1","cve.org","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",[96,107,115,119,123,127,131,136,140,144,148,153,157,161,165,169],{"url":97,"sources":98,"tags":102},"https://docs.djangoproject.com/en/dev/releases/security/",[93,99,100,101],"nvd","osv_pypi","osv_chainguard",[103,104,105,106],"Vendor Advisory","Patch","FIX","Advisory",{"url":108,"sources":109,"tags":110},"https://groups.google.com/g/django-announce",[93,99,100,101],[111,112,113,106,114],"Mailing List","Release Notes","WEB","ARTICLE",{"url":116,"sources":117,"tags":118},"https://www.djangoproject.com/weblog/2026/feb/03/security-releases/",[93,99,100,101],[103,104,105,106],{"url":120,"sources":121,"tags":122},"https://nvd.nist.gov/vuln/detail/CVE-2025-14550",[100,101],[106],{"url":124,"sources":125,"tags":126},"https://github.com/django/django/commit/eb22e1d6d643360e952609ef562c139a100ea4eb",[100],[113],{"url":128,"sources":129,"tags":130},"https://docs.djangoproject.com/en/dev/releases/security",[100],[113],{"url":132,"sources":133,"tags":134},"https://github.com/django/django",[100],[135],"PACKAGE",{"url":137,"sources":138,"tags":139},"https://www.djangoproject.com/weblog/2026/feb/03/security-releases",[100],[113],{"url":141,"sources":142,"tags":143},"https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2026-43.yaml",[100],[113],{"url":145,"sources":146,"tags":147},"https://github.com/advisories/GHSA-33mw-q7rj-mjwj",[100],[106],{"url":149,"sources":150,"tags":152},"https://security-tracker.debian.org/tracker/CVE-2025-14550",[151],"osv_debian",[106],{"url":154,"sources":155,"tags":156},"https://github.com/django/asgiref/",[101],[113],{"url":158,"sources":159,"tags":160},"https://github.com/django/django/",[101],[113],{"url":162,"sources":163,"tags":164},"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/14xxx/CVE-2025-14550.json",[101],[106],{"url":166,"sources":167,"tags":168},"https://pypi.org/project/Django/",[101],[135],{"url":170,"sources":171,"tags":172},"https://pypi.org/project/asgiref/",[101],[135],[],{"date":175,"score":89,"percentile":176},"2026-09-19",0.62245,[178,182,186,190,193,196,200,203,206,209,213,216,219,222,225,228,231,234,237,240,243,246,249,252,255,258,261,264,267,270,273,276,280,283,286,289,291,294,297,300,303,306,309,312,315,318,321,324,327,330,333,336,339,342,345,348,351,354,357,360,363,366,369,372,374,377,380,383,387,390,393,396,399,401,404,407,410,413,416,419,422,425,428,431,434,437,440,443,446,449],{"date":179,"score":180,"percentile":181},"2026-02-04",0.00041,0.12223,{"date":183,"score":184,"percentile":185},"2026-02-05",0.00049,0.15301,{"date":187,"score":188,"percentile":189},"2026-02-06",0.00036,0.10579,{"date":191,"score":188,"percentile":192},"2026-02-07",0.10605,{"date":194,"score":188,"percentile":195},"2026-02-08",0.1059,{"date":197,"score":198,"percentile":199},"2026-02-09",0.00048,0.1469,{"date":201,"score":198,"percentile":202},"2026-02-10",0.14615,{"date":204,"score":198,"percentile":205},"2026-02-11",0.14662,{"date":207,"score":198,"percentile":208},"2026-02-12",0.14686,{"date":210,"score":211,"percentile":212},"2026-02-13",0.00054,0.16929,{"date":214,"score":211,"percentile":215},"2026-02-14",0.16872,{"date":217,"score":211,"percentile":218},"2026-02-15",0.16851,{"date":220,"score":211,"percentile":221},"2026-02-16",0.16811,{"date":223,"score":211,"percentile":224},"2026-02-17",0.16789,{"date":226,"score":211,"percentile":227},"2026-02-18",0.16967,{"date":229,"score":211,"percentile":230},"2026-02-19",0.17025,{"date":232,"score":211,"percentile":233},"2026-02-20",0.17027,{"date":235,"score":211,"percentile":236},"2026-02-21",0.17051,{"date":238,"score":211,"percentile":239},"2026-02-22",0.17054,{"date":241,"score":211,"percentile":242},"2026-02-23",0.17018,{"date":244,"score":211,"percentile":245},"2026-02-24",0.16968,{"date":247,"score":211,"percentile":248},"2026-02-25",0.16932,{"date":250,"score":211,"percentile":251},"2026-02-26",0.16907,{"date":253,"score":211,"percentile":254},"2026-02-27",0.16921,{"date":256,"score":211,"percentile":257},"2026-02-28",0.16913,{"date":259,"score":198,"percentile":260},"2026-03-01",0.14755,{"date":262,"score":198,"percentile":263},"2026-03-02",0.14696,{"date":265,"score":198,"percentile":266},"2026-03-03",0.1467,{"date":268,"score":211,"percentile":269},"2026-03-04",0.16773,{"date":271,"score":211,"percentile":272},"2026-03-05",0.16844,{"date":274,"score":211,"percentile":275},"2026-03-06",0.16823,{"date":277,"score":278,"percentile":279},"2026-03-07",0.00059,0.18327,{"date":281,"score":278,"percentile":282},"2026-03-08",0.18286,{"date":284,"score":278,"percentile":285},"2026-03-09",0.18264,{"date":287,"score":278,"percentile":288},"2026-03-10",0.18248,{"date":290,"score":278,"percentile":288},"2026-03-11",{"date":292,"score":278,"percentile":293},"2026-03-12",0.18314,{"date":295,"score":278,"percentile":296},"2026-03-13",0.18348,{"date":298,"score":278,"percentile":299},"2026-03-14",0.1835,{"date":301,"score":278,"percentile":302},"2026-03-15",0.18289,{"date":304,"score":278,"percentile":305},"2026-03-16",0.18262,{"date":307,"score":278,"percentile":308},"2026-03-17",0.18237,{"date":310,"score":278,"percentile":311},"2026-03-18",0.18236,{"date":313,"score":278,"percentile":314},"2026-03-19",0.1825,{"date":316,"score":278,"percentile":317},"2026-03-20",0.18315,{"date":319,"score":278,"percentile":320},"2026-03-21",0.18438,{"date":322,"score":278,"percentile":323},"2026-03-22",0.18431,{"date":325,"score":278,"percentile":326},"2026-03-23",0.18397,{"date":328,"score":278,"percentile":329},"2026-03-24",0.1839,{"date":331,"score":278,"percentile":332},"2026-03-25",0.18461,{"date":334,"score":278,"percentile":335},"2026-03-26",0.1854,{"date":337,"score":278,"percentile":338},"2026-03-27",0.18568,{"date":340,"score":278,"percentile":341},"2026-03-28",0.18591,{"date":343,"score":278,"percentile":344},"2026-03-29",0.18565,{"date":346,"score":278,"percentile":347},"2026-03-30",0.18545,{"date":349,"score":278,"percentile":350},"2026-03-31",0.18543,{"date":352,"score":278,"percentile":353},"2026-04-01",0.18582,{"date":355,"score":278,"percentile":356},"2026-04-02",0.18717,{"date":358,"score":278,"percentile":359},"2026-04-03",0.18743,{"date":361,"score":278,"percentile":362},"2026-04-04",0.18771,{"date":364,"score":278,"percentile":365},"2026-04-05",0.18739,{"date":367,"score":278,"percentile":368},"2026-04-06",0.18495,{"date":370,"score":278,"percentile":371},"2026-04-07",0.18487,{"date":373,"score":278,"percentile":338},"2026-04-08",{"date":375,"score":278,"percentile":376},"2026-04-09",0.18621,{"date":378,"score":278,"percentile":379},"2026-04-10",0.18634,{"date":381,"score":278,"percentile":382},"2026-04-11",0.18625,{"date":384,"score":385,"percentile":386},"2026-04-12",0.00062,0.19314,{"date":388,"score":385,"percentile":389},"2026-04-13",0.19259,{"date":391,"score":385,"percentile":392},"2026-04-14",0.19176,{"date":394,"score":385,"percentile":395},"2026-04-15",0.19225,{"date":397,"score":385,"percentile":398},"2026-04-16",0.19221,{"date":400,"score":385,"percentile":395},"2026-04-17",{"date":402,"score":385,"percentile":403},"2026-04-18",0.1923,{"date":405,"score":385,"percentile":406},"2026-04-19",0.19173,{"date":408,"score":385,"percentile":409},"2026-04-20",0.19154,{"date":411,"score":385,"percentile":412},"2026-04-21",0.19244,{"date":414,"score":385,"percentile":415},"2026-04-22",0.19303,{"date":417,"score":385,"percentile":418},"2026-04-23",0.19319,{"date":420,"score":385,"percentile":421},"2026-04-24",0.19142,{"date":423,"score":385,"percentile":424},"2026-04-25",0.19151,{"date":426,"score":385,"percentile":427},"2026-04-26",0.19132,{"date":429,"score":385,"percentile":430},"2026-04-27",0.1912,{"date":432,"score":385,"percentile":433},"2026-04-28",0.19085,{"date":435,"score":385,"percentile":436},"2026-04-29",0.1909,{"date":438,"score":385,"percentile":439},"2026-04-30",0.19058,{"date":441,"score":385,"percentile":442},"2026-05-01",0.19044,{"date":444,"score":385,"percentile":445},"2026-05-02",0.1907,{"date":447,"score":385,"percentile":448},"2026-05-03",0.19039,{"date":450,"score":385,"percentile":451},"2026-05-04",0.18984,[453,458,460,464,466],{"source":93,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":454,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":455,"vectorString":94,"impactScore":456,"exploitabilityScore":457},"HIGH",6,10,{"source":99,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":459,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":455,"vectorString":94,"impactScore":456,"exploitabilityScore":457},{"source":100,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":461},{"baseScore":462,"baseSeverity":9,"vectorString":463,"impactScore":9,"exploitabilityScore":9},6.9,"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:U",{"source":151,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":465,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":9,"vectorString":94,"impactScore":456,"exploitabilityScore":457},{"source":101,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":467,"cvss_v4_0":9},{"baseScore":91,"baseSeverity":9,"vectorString":94,"impactScore":456,"exploitabilityScore":457},[469,481,485,491,497,512,522,538],{"ecosystem":470,"name":471,"vendor":472,"product":471,"cpe_part":9,"purl_type":473,"purl_namespace":472,"purl_name":471,"source":9,"versions":474},"Chainguard","authentik","chainguard","apk",[475],{"version":476,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":479,"version_end_type":480,"fixed_in":9},"lt2025_12_1_r2",true,"ecosystem","2025.12.1-r2","excluding",{"ecosystem":470,"name":482,"vendor":472,"product":482,"cpe_part":9,"purl_type":473,"purl_namespace":472,"purl_name":482,"source":9,"versions":483},"authentik-fips",[484],{"version":476,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":479,"version_end_type":480,"fixed_in":9},{"ecosystem":470,"name":486,"vendor":472,"product":486,"cpe_part":9,"purl_type":473,"purl_namespace":472,"purl_name":486,"source":9,"versions":487},"awx",[488],{"version":489,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":490,"version_end_type":480,"fixed_in":9},"lt24_6_1_r27","24.6.1-r27",{"ecosystem":470,"name":492,"vendor":472,"product":492,"cpe_part":9,"purl_type":473,"purl_namespace":472,"purl_name":492,"source":9,"versions":493},"label-studio",[494],{"version":495,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":496,"version_end_type":480,"fixed_in":9},"lt1_22_0_r3","1.22.0-r3",{"ecosystem":498,"name":499,"vendor":500,"product":499,"cpe_part":9,"purl_type":501,"purl_namespace":500,"purl_name":499,"source":9,"versions":502},"Debian","python-django","debian","deb",[503,506,509],{"version":504,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":505,"version_end_type":480,"fixed_in":9},"lt3:3_2_25_0+deb12u2","3:3.2.25-0+deb12u2",{"version":507,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":508,"version_end_type":480,"fixed_in":9},"lt3:4_2_28_0+deb13u1","3:4.2.28-0+deb13u1",{"version":510,"is_range":477,"range_type":478,"version_start":9,"version_start_type":9,"version_end":511,"version_end_type":480,"fixed_in":9},"lt3:4_2_28_1","3:4.2.28-1",{"ecosystem":9,"name":513,"vendor":514,"product":513,"cpe_part":515,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":516},"asgiref","djangoproject","a",[517],{"version":518,"is_range":477,"range_type":93,"version_start":519,"version_start_type":520,"version_end":521,"version_end_type":480,"fixed_in":9},">= 3, \u003C 3.11.1","3","including","3.11.1",{"ecosystem":9,"name":523,"vendor":514,"product":523,"cpe_part":515,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":524},"django",[525,530,534],{"version":526,"is_range":477,"range_type":527,"version_start":528,"version_start_type":520,"version_end":529,"version_end_type":480,"fixed_in":9},"gte4.2_lt4.2.28","cpe","4.2","4.2.28",{"version":531,"is_range":477,"range_type":527,"version_start":532,"version_start_type":520,"version_end":533,"version_end_type":480,"fixed_in":9},"gte5.2_lt5.2.11","5.2","5.2.11",{"version":535,"is_range":477,"range_type":527,"version_start":536,"version_start_type":520,"version_end":537,"version_end_type":480,"fixed_in":9},"gte6.0_lt6.0.2","6.0","6.0.2",{"ecosystem":539,"name":523,"vendor":539,"product":523,"cpe_part":9,"purl_type":540,"purl_namespace":9,"purl_name":523,"source":9,"versions":541},"PyPI","pypi",[542,544,547,550],{"version":543,"is_range":477,"range_type":478,"version_start":536,"version_start_type":520,"version_end":537,"version_end_type":480,"fixed_in":9},"gte6_0_lt6_0_2",{"version":545,"is_range":477,"range_type":478,"version_start":546,"version_start_type":520,"version_end":537,"version_end_type":480,"fixed_in":9},"gte6_0a1_lt6_0_2","6.0a1",{"version":548,"is_range":477,"range_type":478,"version_start":549,"version_start_type":520,"version_end":533,"version_end_type":480,"fixed_in":9},"gte5_2a1_lt5_2_11","5.2a1",{"version":551,"is_range":477,"range_type":478,"version_start":552,"version_start_type":520,"version_end":529,"version_end_type":480,"fixed_in":9},"gte4_2a1_lt4_2_28","4.2a1"]