CVE-2021-45115

score

<0.1

cvss

7.5

epss

2.4%

published

2022-01-05

kev added

—

first seen

2026-10-21

Django 2.2 < 2.2.26, 3.2 < 3.2.11, and 4.0 < 4.0.1 contain a denial-of-service caused by significant overhead in evaluating large submitted passwords in UserAttributeSimilarityValidator, letting attackers cause service disruption, exploit requires unrestricted access to user registration.