In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Oct 16, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 16, 2022 |
| Centos_linux | — | Upgrade rubygem-netrcUpgrade rubygem-oauth-ttyUpgrade rubygem-multi_jsonUpgrade rubygem-snaky_hashUpgrade rubygem-little-pluggerUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-gssapiUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cliUpgrade satellite-cloneUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-fast_gettextUpgrade rubygem-jwtUpgrade rubygem-loggingUpgrade rubygem-unicodeUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debugsourceUpgrade rubygem-mime-types-dataUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-http-acceptUpgrade satellite-maintainUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-oauthUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unf_extUpgrade rubygem-foreman_maintainUpgrade rubygem-ffiUpgrade rubygem-version_gemUpgrade rubygem-http-cookieUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-domain_nameUpgrade rubygem-clampUpgrade satellite-cliUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-amazing_printUpgrade python39-pulp_manifestUpgrade rubygem-powerbarUpgrade rubygem-highline | May 4, 2023 | Oct 16, 2022 |
| Debian | — | Upgrade python-django | Nov 4, 2022 | Oct 16, 2022 |
| Freebsd | — | Upgrade py310-django32Upgrade py37-django32Upgrade py310-django40Upgrade py38-django32Upgrade py310-django41Upgrade py39-django40Upgrade py39-django41Upgrade py38-django41Upgrade py38-django40Upgrade py39-django32 | Nov 4, 2022 | Oct 6, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-multi_jsonUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_adminUpgrade satellite-maintainUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicodeUpgrade rubygem-unicode-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-ffiUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unicode-debuginfoUpgrade rubygem-netrcUpgrade rubygem-mime-typesUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cliUpgrade rubygem-rest-clientUpgrade satellite-cloneUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-version_gemUpgrade rubygem-unf_extUpgrade rubygem-little-pluggerUpgrade rubygem-ffi-debugsourceUpgrade rubygem-oauth-ttyUpgrade rubygem-amazing_printUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-snaky_hashUpgrade python39-pulp_manifestUpgrade rubygem-hashieUpgrade rubygem-highlineUpgrade rubygem-mime-types-dataUpgrade rubygem-loggingUpgrade rubygem-localeUpgrade foreman-cliUpgrade rubygem-foreman_maintainUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unfUpgrade rubygem-jwtUpgrade rubygem-oauthUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_tasks | May 4, 2023 | Oct 16, 2022 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfoUpgrade libdb-sql-debuginfo | Mar 12, 2024 | Oct 16, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Oct 16, 2022 |
| Ubuntu | — | Upgrade python3-django | Oct 5, 2022 | Oct 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub