CVE-2025-27556

Summary

CVE-2025-27556 is a vulnerability affecting Django versions 5.1 before 5.1.8 and 5.0 before 5.0.14. The root cause is the slow NFKC normalization process on Windows systems. This issue can lead to a denial-of-service attack on specific views, including django.contrib.auth.views.LoginView, django.contrib.auth.views.LogoutView, and django.views.i18n.set_language. An attacker can exploit this vulnerability by providing inputs with a large number of Unicode characters, overwhelming the system's resources and causing the application to crash or become unresponsive.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.