CVE-2023-46695

score

<0.1

cvss

7.5

epss

49.8%

published

2023-11-02

kev added

—

first seen

2026-10-21

Django 3.2 < 3.2.23, 4.1 < 4.1.13, and 4.2 < 4.2.7 contain a denial of service caused by slow NFKC normalization on Windows in UsernameField, letting attackers cause service disruption via inputs with many Unicode characters, exploit requires sending large Unicode inputs.