... ect targets and puts such a URL into a link, they could suffer from an XSS attack. CVE-2016-2513: User enumeration through timing difference on password hasher work factor upgrade ¶ In each major version of Django since 1.6, the default number of itera ... s has increased. This improves the security of the password as the speed of hardware increases, however, it also creates a timing difference between a login request for a user with a password encoded in an older number of iterations and login request f ... me a user logs in after an iterations increase, their password is updated with the new iterations and there is no longer a timing difference. The new BasePasswordHasher.harden_runtime() method allows hashers to bridge the runtime gap between the work f ... ... ect targets and puts such a URL into a link, they could suffer from an XSS attack. CVE-2016-2513: User enumeration through timing difference on password hasher work factor upgrade ¶ In each major version of Django since 1.6, the default number of itera ... s has increased. This improves the security of the password as the speed of hardware increases, however, it also creates a timing difference between a login request for a user with a password encoded in an older number of iterations and login request f ... me a user logs in after an iterations increase, their password is updated with the new iterations and there is no longer a timing difference. The new BasePasswordHasher.harden_runtime() method allows hashers to bridge the runtime gap between the work f ... ... ect targets and puts such a URL into a link, they could suffer from an XSS attack. CVE-2016-2513: User enumeration through timing difference on password hasher work factor upgrade ¶ In each major version of Django since 1.6, the default number of itera ... s has increased. This improves the security of the password as the speed of hardware increases, however, it also creates a timing difference between a login request for a user with a password encoded in an older number of iterations and login request f ... me a user logs in after an iterations increase, their password is updated with the new iterations and there is no longer a timing difference. The new BasePasswordHasher.harden_runtime() method allows hashers to bridge the runtime gap between the work f ... ... ect targets and puts such a URL into a link, they could suffer from an XSS attack. CVE-2016-2513: User enumeration through timing difference on password hasher work factor upgrade ¶ In each major version of Django since 1.6, the default number of itera ... s has increased. This improves the security of the password as the speed of hardware increases, however, it also creates a timing difference between a login request for a user with a password encoded in an older number of iterations and login request f ... me a user logs in after an iterations increase, their password is updated with the new iterations and there is no longer a timing difference. The new BasePasswordHasher.harden_runtime() method allows hashers to bridge the runtime gap between the work f ... ... derate", and one security issue with severity "low" in 4.2.27. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler ¶ The django.contrib.auth.handlers.modwsgi.check_password() function for aut ... hentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-servic ... h" according to the Django security policy . 目次 Django 4.2.28 release notes CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler CVE-2025-14550: Potential denial-of-service vulnerability via repeated heade ... ... derate", and one security issue with severity "low" in 5.2.10. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler ¶ The django.contrib.auth.handlers.modwsgi.check_password() function for aut ... hentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-servic ... h" according to the Django security policy . 目次 Django 5.2.11 release notes CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler CVE-2025-14550: Potential denial-of-service vulnerability via repeated heade ... ... derate", and one security issue with severity "low" in 4.2.27. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler ¶ The django.contrib.auth.handlers.modwsgi.check_password() function for aut ... hentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-servic ... h" according to the Django security policy . 目次 Django 4.2.28 release notes CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler CVE-2025-14550: Potential denial-of-service vulnerability via repeated heade ... ... derate", and one security issue with severity "low" in 5.2.10. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler ¶ The django.contrib.auth.handlers.modwsgi.check_password() function for aut ... hentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-servic ... h" according to the Django security policy . 目次 Django 5.2.11 release notes CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler CVE-2025-14550: Potential denial-of-service vulnerability via repeated heade ... ... rate", one security issue with severity "low", and several bugs in 6.0.1. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler ¶ The django.contrib.auth.handlers.modwsgi.check_password() function for aut ... hentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-servic ... meters passed to field.pre_save() ( #36847 ). 目次 Django 6.0.2 release notes CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler CVE-2025-14550: Potential denial-of-service vulnerability via repeated heade ... ... rate", one security issue with severity "low", and several bugs in 6.0.1. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler ¶ The django.contrib.auth.handlers.modwsgi.check_password() function for aut ... hentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-servic ... meters passed to field.pre_save() ( #36847 ). 目次 Django 6.0.2 release notes CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler CVE-2025-14550: Potential denial-of-service vulnerability via repeated heade ... 2026年10月08日