Every CVE Search/ Get API key

CVE-2007-5712

Django vulnerable to Denial of Service via i18n middleware component

2.6 LowFix available

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

Exploit likelihood

1.80%Down 0.4 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 2.6

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

Record
CVE-2007-5712
CVSS 2.0
2.6 LowAV:N/AC:H/Au:N/C:N/I:N/A:P
Weakness
CWE-399
Updated
2026-11-02
CVE List No score

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

Record
CVE-2007-5712
Updated
2026-11-02
EUVDEUVD-2007-0001 No score

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

Record
EUVD-2007-0001
Updated
2026-11-03
GitHub AdvisoriesGHSA-9v8h-57gv-qch6 8.2

Django vulnerable to Denial of Service via i18n middleware component

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

Record
GHSA-9v8h-57gv-qch6
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
OSVGHSA-9v8h-57gv-qch6 8.2

Django vulnerable to Denial of Service via i18n middleware component

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

Record
GHSA-9v8h-57gv-qch6
CVSS 4.0
8.2 HighCVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
CVSS 3.1
5.9 MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H
Weakness
CWE-400
Updated
2026-11-02
OSV No score

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

Record
CVE-2007-5712
Updated
2026-11-02
OSVDEBIAN-CVE-2007-5712 No score

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

Record
DEBIAN-CVE-2007-5712
Updated
2026-11-02
OSVPYSEC-2007-1 No score

The internationalization (i18n) framework in Django 0.91, 0.95, 0.95.1, and 0.96, and as used in other products such as PyLucid, when the USE_I18N option and the i18n component are enabled, allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.

Record
PYSEC-2007-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
django
PyPI
 0.95 up to 0.95.2
0.95.2
django
PyPI
 0.96.0 to 0.96.0
0.96.1
django
PyPI
 0.91.0 to 0.91.0
0.91.1
python-django
Debian:12
 before 0.96-1.1
0.96-1.1
python-django
Debian:13
 before 0.96-1.1
0.96-1.1
python-django
Debian:14
 before 0.96-1.1
0.96-1.1
python-django
Debian:4.0
From an advisory covering 2 CVEs
 before 0.95.1-1etch2, plus listed versions
0.95.1-10.95.1-1etch1
0.95.1-1etch2
django
PyPI
 0.96.0 up to 0.96.1
0.96.1
django
PyPI
 0.91.0 up to 0.91.1
0.91.1
django
PyPI
 before 1.1, plus listed versions
1.0.11.0.21.0.31.0.4
1.1

History

History
RecordedChangedSources
affected, facts
aliasesEUVD
affected, aliases, cwes, facts, references, titleGitHub Advisories, OSV
first indexedCVE List, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2007-5712 is a low vulnerability (CVSS 2.6) in Django Project Django, published October 30, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.80%, the 78th percentile. Fixed in django 0.95.2.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open