summaryrefslogtreecommitdiff
path: root/docs/releases/3.2.20.txt
diff options
context:
space:
mode:
Diffstat (limited to 'docs/releases/3.2.20.txt')
-rw-r--r--docs/releases/3.2.20.txt7
1 files changed, 6 insertions, 1 deletions
diff --git a/docs/releases/3.2.20.txt b/docs/releases/3.2.20.txt
index e4ef914394..c8f60a70e2 100644
--- a/docs/releases/3.2.20.txt
+++ b/docs/releases/3.2.20.txt
@@ -6,4 +6,9 @@ Django 3.2.20 release notes
Django 3.2.20 fixes a security issue with severity "moderate" in 3.2.19.
-...
+CVE-2023-36053: Potential regular expression denial of service vulnerability in ``EmailValidator``/``URLValidator``
+===================================================================================================================
+
+``EmailValidator`` and ``URLValidator`` were subject to potential regular
+expression denial of service attack via a very large number of domain name
+labels of emails and URLs.