An issue was discovered in Django 1.11.x before 1.11.23, 2.1.x before 2.1.11, and 2.2.x before 2.2.4. If passed certain inputs, django.utils.encoding.uri_to_iri could lead to significant memory usage due to a recursion when repercent-encoding invalid UTF-8 octet sequences.
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Django | Djangoproject | 1.11 (including) | 1.11.23 (excluding) |
| Django | Djangoproject | 2.1 (including) | 2.1.11 (excluding) |
| Django | Djangoproject | 2.2 (including) | 2.2.4 (excluding) |