-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| django | pip | >= 3.2a1, < 3.2.17 | 3.2.17 |
| django | pip | >= 4.0a1, < 4.0.9 | 4.0.9 |
| django | pip | >= 4.1a1, < 4.1.6 | 4.1.6 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from the original parse_accept_lang_header function being decorated with @functools.lru_cache. This cached parsed header values without limiting input size, allowing memory exhaustion via large headers. The security patch renamed this function to _parse_accept_lang_header and added a wrapper with length validation, confirming this was the vulnerable component.