CVE-2026-77050 Details
UNDERGOING ENRICHMENT
The CVE is currently being enriched by the Volerion team. The enrichment process results in the association of reference link tags, CVSS, and CPE applicability statement data.
Description
An issue was discovered in Django 6.1 before 6.1.2, 6.0 before 6.0.9, and 5.2 before 5.2.18. `django.utils.translation.get_supported_language_variant()` is subject to a potential denial-of-service attack when processing many distinct, very long language codes, which are retained as keys in an in-memory cache and consume process memory. Earlier, unsupported Django series (such as 5.1.x, 5.0.x, and 4.2.x) were not evaluated and may also be affected. Django would like to thank Gleb Lizunov for reporting this issue.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS-B:…Vector:This vulnerability is currently being analyzed.CVSS 3.x Severity and Vector Strings:
VolerionCVSS-B:…Vector:This vulnerability is currently being analyzed.No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Oct 6, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://docs.djangoproject.com/en/dev/releases/security/ | Django Software Foundation | |
| https://github.com/django/django/commit/02a69e3791e3df23d45ea4ea7e7fc489f0eef2be | Django Software Foundation | |
| https://github.com/django/django/commit/3d32ee80ae52745d686bf94d3555000ddf073267 | Django Software Foundation | |
| https://github.com/django/django/commit/7e878b0f8bd42260903e6a0d38996a93b0474a0b | Django Software Foundation | |
| https://github.com/django/django/commit/c88b304cc2d90fc37d3bd1f5f3829706fa6c13bc | Django Software Foundation | |
| https://groups.google.com/g/django-announce | Django Software Foundation | |
| https://www.djangoproject.com/weblog/2026/oct/06/security-releases/ | Django Software Foundation |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-789 | Memory Allocation with Excessive Size Value | Django Software Foundation |
Affected Products
This vulnerability is currently being analyzed
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 6, 2026 | CVE Modified | CISA-ADP |
| Oct 6, 2026 | New CVE Received | Django Software Foundation |