[Snyk:High] Django Regular Expression Denial of Service (ReDoS)(due by 08/17/2023)
pkfec opened this issue · 1 comments
pkfec commented
Overview
Affected versions of this package are vulnerable to Regular Expression Denial of Service (ReDoS) in the EmailValidator and URLValidator classes, when processing a very large number of domain name labels on emails or URLs
Detailed path:
django@3.2.19, django-haystack@3.1.1 and others
Completion criteria:
- Pin django to version 3.2.20 or 4.1.10 or 4.2.3
- parser functionality works