[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-CVE-2026-15337":6},{"stargazers_count":4,"fetched_at":5},8,"2026-09-19T11:35:27.363Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":19,"aliases":20,"duplicate_of":9,"upstream":23,"downstream":24,"duplicates":37,"related":38,"reserved_at":9,"published_at":44,"modified_at":45,"state":46,"summary":47,"references_raw":56,"kevs":105,"epss":106,"epss_history":109,"metrics":247,"affected":265},"CVE-2026-15337","An issue was discovered in Django 5.2 before 5.2.17 and 6.0 before 6.0.8.\n`django.utils.translation.check_for_language()` is subject to a potential denial-of-service attack when given many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory. Such codes reach the function through the `django.views.i18n.set_language()` view, which is not routed by default. The consumed memory is bounded, since request data is limited by the `DATA_UPLOAD_MAX_MEMORY_SIZE` setting (default 2.5 MB) and the cache holds a fixed maximum number of entries.\nEarlier, unsupported Django series (such as 5.1.x, 5.0.x, and 4.2.x) were not evaluated and may also be affected.\nDjango would like to thank Jaeyoung Jang for reporting this issue.",null,[11],{"_key":12,"id":12,"name":13,"description":14,"type":15,"status":16,"abstraction":17,"likelihood_of_exploit":9,"capec":18},"CWE-789","Memory Allocation with Excessive Size Value","The product allocates memory based on an untrusted, large size value, but it does not ensure that the size is within expected limits, allowing arbitrary amounts of memory to be allocated.","weakness","Draft","Variant",[],[],[21,22],"UBUNTU-CVE-2026-15337","DEBIAN-CVE-2026-15337",[],[25,27,29,31,33,35],{"_key":26},"SUSE-SU-2026:3503-1",{"_key":28},"OPENSUSE-SU-2026:11464-1",{"_key":30},"OPENSUSE-SU-2026:11465-1",{"_key":32},"OPENSUSE-SU-2026:11491-1",{"_key":34},"OPENSUSE-SU-2026:21543-1",{"_key":36},"MGASA-2026-0339",[],[39,40,41,42,43],{"_key":26},{"_key":28},{"_key":30},{"_key":32},{"_key":34},"2026-08-04T15:48:25.817Z","2026-08-04T17:21:43.493Z","Analyzed",{"cisa_kev":48,"cisa_ransomware":48,"cisa_vendor":9,"epss_severity":49,"epss_score":50,"severity":51,"severity_score":52,"severity_version":53,"severity_source":54,"severity_vector":55,"severity_status":46},false,"low",0.01028,"medium",6.9,"v4.0","cve.org","CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N",[57,66,71,75,79,83,87,91,95,99],{"url":58,"sources":59,"tags":62},"https://docs.djangoproject.com/en/dev/releases/security/",[54,60,61],"nvd","osv_ubuntu",[63,64,65],"Vendor Advisory","REPORT","Patch",{"url":67,"sources":68,"tags":69},"https://groups.google.com/g/django-announce",[54,60,61],[70,64],"Mailing List",{"url":72,"sources":73,"tags":74},"https://github.com/django/django/commit/27137e655e442e81095f1f8f77ff3870d9fdf169",[54,60,61],[65,64],{"url":76,"sources":77,"tags":78},"https://github.com/django/django/commit/5b3523d29be25948e1dd90b3863a002f00fc865f",[54,60,61],[65,64],{"url":80,"sources":81,"tags":82},"https://github.com/django/django/commit/224dbc832586ad5cfb0237c2ff30d14baeaddc6f",[54,60,61],[65,64],{"url":84,"sources":85,"tags":86},"https://github.com/django/django/commit/c72a5dbb64d0777f3f471f1be94e8b2ca91e0959",[54,60,61],[65,64],{"url":88,"sources":89,"tags":90},"https://www.djangoproject.com/weblog/2026/aug/04/security-releases/",[54,60,61],[63,64],{"url":92,"sources":93,"tags":94},"https://ubuntu.com/security/CVE-2026-15337",[61],[64],{"url":96,"sources":97,"tags":98},"https://www.cve.org/CVERecord?id=CVE-2026-15337",[61],[64],{"url":100,"sources":101,"tags":103},"https://security-tracker.debian.org/tracker/CVE-2026-15337",[102],"osv_debian",[104],"Advisory",[],{"date":107,"score":50,"percentile":108},"2026-09-19",0.62131,[110,114,117,120,123,126,129,132,135,138,141,144,147,150,153,156,159,162,165,168,171,174,177,180,183,186,189,192,195,198,201,204,207,210,213,216,219,222,225,228,231,234,237,240,243,246],{"date":111,"score":112,"percentile":113},"2026-08-05",0.00521,0.41351,{"date":115,"score":112,"percentile":116},"2026-08-06",0.4139,{"date":118,"score":112,"percentile":119},"2026-08-07",0.41436,{"date":121,"score":112,"percentile":122},"2026-08-08",0.41442,{"date":124,"score":112,"percentile":125},"2026-08-09",0.41425,{"date":127,"score":112,"percentile":128},"2026-08-10",0.4143,{"date":130,"score":112,"percentile":131},"2026-08-11",0.41512,{"date":133,"score":112,"percentile":134},"2026-08-12",0.41606,{"date":136,"score":112,"percentile":137},"2026-08-13",0.41642,{"date":139,"score":112,"percentile":140},"2026-08-14",0.41711,{"date":142,"score":112,"percentile":143},"2026-08-15",0.41829,{"date":145,"score":112,"percentile":146},"2026-08-16",0.41857,{"date":148,"score":112,"percentile":149},"2026-08-17",0.41828,{"date":151,"score":112,"percentile":152},"2026-08-18",0.41855,{"date":154,"score":112,"percentile":155},"2026-08-19",0.42058,{"date":157,"score":112,"percentile":158},"2026-08-20",0.42117,{"date":160,"score":112,"percentile":161},"2026-08-21",0.42154,{"date":163,"score":112,"percentile":164},"2026-08-22",0.42171,{"date":166,"score":112,"percentile":167},"2026-08-23",0.4204,{"date":169,"score":50,"percentile":170},"2026-08-24",0.61017,{"date":172,"score":50,"percentile":173},"2026-08-25",0.6104,{"date":175,"score":50,"percentile":176},"2026-08-26",0.6111,{"date":178,"score":50,"percentile":179},"2026-08-27",0.61139,{"date":181,"score":50,"percentile":182},"2026-08-28",0.60678,{"date":184,"score":50,"percentile":185},"2026-08-29",0.60707,{"date":187,"score":50,"percentile":188},"2026-08-30",0.61217,{"date":190,"score":50,"percentile":191},"2026-08-31",0.61227,{"date":193,"score":50,"percentile":194},"2026-09-01",0.61252,{"date":196,"score":50,"percentile":197},"2026-09-02",0.61292,{"date":199,"score":50,"percentile":200},"2026-09-03",0.61315,{"date":202,"score":50,"percentile":203},"2026-09-04",0.61344,{"date":205,"score":50,"percentile":206},"2026-09-05",0.60884,{"date":208,"score":50,"percentile":209},"2026-09-06",0.61394,{"date":211,"score":50,"percentile":212},"2026-09-07",0.61402,{"date":214,"score":50,"percentile":215},"2026-09-08",0.61419,{"date":217,"score":50,"percentile":218},"2026-09-09",0.61598,{"date":220,"score":50,"percentile":221},"2026-09-10",0.61619,{"date":223,"score":50,"percentile":224},"2026-09-11",0.61648,{"date":226,"score":50,"percentile":227},"2026-09-12",0.61707,{"date":229,"score":50,"percentile":230},"2026-09-13",0.61704,{"date":232,"score":50,"percentile":233},"2026-09-14",0.61721,{"date":235,"score":50,"percentile":236},"2026-09-15",0.61786,{"date":238,"score":50,"percentile":239},"2026-09-16",0.61926,{"date":241,"score":50,"percentile":242},"2026-09-17",0.61993,{"date":244,"score":50,"percentile":245},"2026-09-18",0.62095,{"date":107,"score":50,"percentile":108},[248,256,260,263],{"source":54,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":249,"cvss_v4_0":255},{"baseScore":250,"baseSeverity":251,"vectorString":252,"impactScore":253,"exploitabilityScore":254},5.3,"MEDIUM","CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L",2.3,10,{"baseScore":52,"baseSeverity":251,"vectorString":55,"impactScore":9,"exploitabilityScore":9},{"source":60,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":257,"cvss_v4_0":258},{"baseScore":250,"baseSeverity":251,"vectorString":252,"impactScore":253,"exploitabilityScore":254},{"baseScore":52,"baseSeverity":251,"vectorString":259,"impactScore":9,"exploitabilityScore":9},"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X",{"source":61,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":261,"cvss_v4_0":262},{"baseScore":250,"baseSeverity":9,"vectorString":252,"impactScore":253,"exploitabilityScore":254},{"baseScore":52,"baseSeverity":9,"vectorString":55,"impactScore":9,"exploitabilityScore":9},{"source":102,"cvss_v2_0":9,"cvss_v3_0":9,"cvss_v3_1":9,"cvss_v4_0":264},{"baseScore":52,"baseSeverity":9,"vectorString":259,"impactScore":9,"exploitabilityScore":9},[266,287,295],{"ecosystem":267,"name":268,"vendor":269,"product":268,"cpe_part":9,"purl_type":270,"purl_namespace":269,"purl_name":268,"source":9,"versions":271},"Debian","python-django","debian","deb",[272,276,280,283,284],{"version":273,"is_range":274,"range_type":275,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},"all",true,"ecosystem",{"version":277,"is_range":274,"range_type":275,"version_start":9,"version_start_type":9,"version_end":278,"version_end_type":279,"fixed_in":9},"lt2:2_2_28_1~deb11u13","2:2.2.28-1~deb11u13","excluding",{"version":281,"is_range":274,"range_type":275,"version_start":9,"version_start_type":9,"version_end":282,"version_end_type":279,"fixed_in":9},"lt3:3_2_25_0+deb12u4","3:3.2.25-0+deb12u4",{"version":273,"is_range":274,"range_type":275,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":285,"is_range":274,"range_type":275,"version_start":9,"version_start_type":9,"version_end":286,"version_end_type":279,"fixed_in":9},"lt3:5_2_17_1","3:5.2.17-1",{"ecosystem":288,"name":268,"vendor":289,"product":268,"cpe_part":9,"purl_type":270,"purl_namespace":289,"purl_name":268,"source":9,"versions":290},"Ubuntu","ubuntu",[291,292,293,294],{"version":273,"is_range":274,"range_type":275,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":273,"is_range":274,"range_type":275,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":273,"is_range":274,"range_type":275,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"version":273,"is_range":274,"range_type":275,"version_start":9,"version_start_type":9,"version_end":9,"version_end_type":9,"fixed_in":9},{"ecosystem":9,"name":296,"vendor":297,"product":296,"cpe_part":298,"purl_type":9,"purl_namespace":9,"purl_name":9,"source":9,"versions":299},"django","djangoproject","a",[300,305,308],{"version":301,"is_range":274,"range_type":54,"version_start":302,"version_start_type":303,"version_end":304,"version_end_type":279,"fixed_in":9},"gte5.2_lt5.2.17","5.2","including","5.2.17",{"version":306,"is_range":274,"range_type":307,"version_start":9,"version_start_type":9,"version_end":304,"version_end_type":279,"fixed_in":9},"lt5.2.17","cpe",{"version":309,"is_range":274,"range_type":307,"version_start":310,"version_start_type":303,"version_end":311,"version_end_type":279,"fixed_in":9},"gte6.0_lt6.0.8","6.0","6.0.8"]