CVE-2026-25673
Mar 3, 2026
An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. `URLField.to_python()` in Django calls `urllib.parse.urlsplit()`, which performs NFKC normalization on Windows th...
Read Advisory
1 advisories affecting Django
1
Total CVEs
0
Critical
1
High