What is CVE-2026-15337?
CVE-2026-15337 affects Django web framework versions 5.2 prior to 5.2.17 and 6.0 prior to 6.0.8. The `django.utils.translation.check_for_language()` method is vulnerable to a denial-of-service attack by retaining many distinct, very long language codes as keys in an in-memory cache, consuming process memory. Users must upgrade to the patched versions immediately.
Azərbaycanca: CVE-2026-15337 Django veb framework-ündə aşkarlanıb, 5.2.17-dən əvvəlki 5.2 və 6.0.8-dən əvvəlki 6.0 versiyalarına təsir edir. `django.utils.translation.check_for_language()` funksiyası çoxlu sayda unikal, uzun dil kodu qəbul edərkən onları proses yaddaşında saxlayır, bu isə denial-of-service (DoS) hücumuna səbəb ola bilər. Təsirə məruz qalan versiyaların istifadəçiləri dərhal yeni versiyaya yeniləməlidir.
Related CVEs
link basis: same weakness class CWE-400
FAQ2
Which Django versions should I upgrade to in order to patch CVE-2026-15337?
You should upgrade to Django versions 5.2.17 or 6.0.8.
What type of attack is CVE-2026-15337?
It is a denial-of-service (DoS) vulnerability. The `check_for_language()` function can exhaust process memory by retaining many unique, long language codes in its in-memory cache.
See also6
This explainer is AI-written from source data — skopnix's own reporting on this CVE; CVSS scores, vendors and versions are never invented. See NVD for the official record.