In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Oct 16, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 16, 2022 |
| Centos_linux | — | Upgrade rubygem-powerbarUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-domain_nameUpgrade rubygem-localeUpgrade rubygem-hashieUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-http-cookieUpgrade rubygem-version_gemUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_adminUpgrade satellite-cliUpgrade rubygem-clampUpgrade rubygem-ffiUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-amazing_printUpgrade python39-pulp_manifestUpgrade rubygem-rest-clientUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-http-acceptUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unfUpgrade satellite-cloneUpgrade rubygem-loggingUpgrade rubygem-unicodeUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unicode-debugsourceUpgrade rubygem-jwtUpgrade rubygem-apipie-bindingsUpgrade rubygem-oauth-ttyUpgrade rubygem-snaky_hashUpgrade rubygem-netrcUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cliUpgrade rubygem-fast_gettextUpgrade rubygem-gssapiUpgrade rubygem-mime-types-dataUpgrade rubygem-mime-typesUpgrade rubygem-unicode-debuginfo | May 4, 2023 | Oct 16, 2022 |
| Debian | — | Upgrade python-django | Nov 4, 2022 | Oct 16, 2022 |
| Freebsd | — | Upgrade py38-django41Upgrade py39-django32Upgrade py38-django40Upgrade py310-django40Upgrade py38-django32Upgrade py310-django32Upgrade py37-django32Upgrade py39-django41Upgrade py39-django40Upgrade py310-django41 | Nov 4, 2022 | Oct 6, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-http-acceptUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicodeUpgrade rubygem-netrcUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-powerbarUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unf_ext-debugsourceUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-multi_jsonUpgrade rubygem-ffiUpgrade rubygem-localeUpgrade satellite-cloneUpgrade rubygem-amazing_printUpgrade rubygem-unicode-debuginfoUpgrade rubygem-oauth-ttyUpgrade rubygem-highlineUpgrade rubygem-foreman_maintainUpgrade rubygem-little-pluggerUpgrade rubygem-unfUpgrade foreman-cliUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cliUpgrade rubygem-domain_nameUpgrade rubygem-hashieUpgrade python39-pulp_manifestUpgrade rubygem-loggingUpgrade rubygem-jwtUpgrade rubygem-http-cookieUpgrade rubygem-version_gemUpgrade rubygem-oauthUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-gssapiUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-ffi-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-ffi-debugsourceUpgrade rubygem-clamp | May 4, 2023 | Oct 16, 2022 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-cxxUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfo | Mar 12, 2024 | Oct 16, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Oct 16, 2022 |
| Ubuntu | — | Upgrade python3-django | Oct 5, 2022 | Oct 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub