CVE-2021-32052

score

<0.1

cvss

6.1

epss

3.2%

published

2021-05-06

kev added

—

first seen

2026-10-21

Django 2.2 before 2.2.22, 3.1 before 3.1.10, and 3.2 before 3.2.2 with Python 3.9.5+ contain a URL validation issue caused by URLValidator not prohibiting newlines and tabs, letting attackers perform header injection if URL values are used in HTTP responses, exploit requires application to use URL values with newlines in responses.