Description: An issue was discovered in Django 3.2 before 3.2.23, 4.1 before 4.1.13, and 4.2 before 4.2.7. The NFKC normalization is slow on Windows. As a consequence, django.contrib.auth.forms.UsernameField is subject to a potential DoS (denial of service) attack via certain inputs with a very large number of Unicode characters. Broken commit info: Bugfix commit info: https://github.com/django/django/commit/048a9ebb6ea468426cb4e57c71572cbbd975517f https://github.com/django/django/commit/05ba4130ee878c4f520b5d34bb11eaad794623be https://github.com/django/django/commit/4965bfdde2e5a5c883685019e57d123a3368a75e https://github.com/django/django/commit/f9a7fb8466a7ba4857eaf930099b5258f3eafb2b
PR: https://gitee.com/src-anolis-os/python-django/pulls/3