validators.URLValidator in Django 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (CPU consumption) via unspecified vectors.
https://www.djangoproject.com/weblog/2015/jul/08/security-releases/
https://security.gentoo.org/glsa/201510-06