CVE-2025-14550

score

<0.1

cvss

7.5

epss

1.1%

published

2026-02-03

kev added

—

first seen

2026-10-21

Django < 6.0.2, < 5.2.11, and < 4.2.28 contain a denial-of-service vulnerability caused by ASGIRequest processing multiple duplicate headers, letting remote attackers cause DoS via crafted requests, exploit requires crafted request.