AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2025-64458

HIGH · CVSS 7.5 EPSS 1.90%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2025-11-05 · Last synced 2026-08-04

CyberRota Analysis

This is a high severity vulnerability with a CVSS score of 7.5. It affects Windows. It may lead to a denial-of-service condition.

CVE
CVE-2025-64458
Severity
HIGH
CVSS
7.5
EPSS
1.90%
Windows

Original NVD Description

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. NFKC normalization in Python is slow on Windows. As a consequence, `django.http.HttpResponseRedirect`, `django.http.HttpResponsePermanentRedirect`, and the shortcut `django.shortcuts.redirect` were subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Seokchan Yoon for reporting this issue.

Related CVEs

Other vulnerabilities affecting the same vendor(s)