---
title: "Django 3.2.23 release notes"
version: 5.0
locale: es
source: https://docs.djangoproject.com/es/5.0/releases/3.2.23/
canonical: https://djangodocs.dev/es/5.0/releases/3.2.23/
---
# Django 3.2.23 release notes

*November 1, 2023*

Django 3.2.23 fixes a security issue with severity «moderate» in 3.2.22.

## CVE-2023-46695: Potential denial of service vulnerability in `UsernameField` on Windows

The [`NFKC normalization`](https://docs.python.org/3/library/unicodedata.html#unicodedata.normalize) is slow on
Windows. As a consequence, `django.contrib.auth.forms.UsernameField` was
subject to a potential denial of service attack via certain inputs with a very
large number of Unicode characters.

In order to avoid the vulnerability, invalid values longer than
`UsernameField.max_length` are no longer normalized, since they cannot pass
validation anyway.