-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| Django | pip | >= 3.2a1, < 3.2.20 | 3.2.20 |
| Django | pip | >= 4.0a1, < 4.1.10 | 4.1.10 |
| Django | pip | >= 4.2a1, < 4.2.3 | 4.2.3 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from missing input length validation in both EmailValidator and URLValidator. The commit adds max_length checks (320 for emails, 2048 for URLs) to their call methods, which directly addresses the ReDoS vector by preventing excessively long inputs that could cause catastrophic backtracking in their regex patterns. The patch modifications in validators.py confirm these functions were the attack surface.