authentik
Chainguard
Status
Justification
Impact
As per the security report this issue only affects code running on Windows. NFKC normalization in Python is slow on Windows. As a consequence, HttpResponseRedirect, HttpResponsePermanentRedirect, and redirect were subject to a potential denial-of-service attack via certain inputs with a very large number of Unicode characters. More information can be found in the Django security release: https://www.djangoproject.com/weblog/2025/nov/05/security-releases/