Description
An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uri_to_iri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences.
Remediation
References
Related Vulnerabilities
MySQL Uncontrolled Resource Consumption Vulnerability (CVE-2025-50079)
Oracle Application Server Other Vulnerability (CVE-2005-3449)
WordPress Plugin 0mk Shortener Cross-Site Request Forgery (0.2)
WordPress Plugin WP Shop Multiple Vulnerabilities (3.4.3.18)
WordPress Plugin Visual Email Designer for WooCommerce SQL Injection (1.7.1)