In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Oct 16, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 16, 2022 |
| Centos_linux | — | Upgrade rubygem-ffiUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hashieUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade python39-pulp_manifestUpgrade rubygem-version_gemUpgrade foreman-cliUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-clampUpgrade rubygem-powerbarUpgrade rubygem-rest-clientUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-amazing_printUpgrade rubygem-http-cookieUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-oauthUpgrade rubygem-domain_nameUpgrade rubygem-mime-typesUpgrade rubygem-apipie-bindingsUpgrade rubygem-http-acceptUpgrade rubygem-unicode-debuginfoUpgrade rubygem-mime-types-dataUpgrade rubygem-ffi-debugsourceUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-fast_gettextUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unfUpgrade rubygem-loggingUpgrade satellite-maintainUpgrade satellite-cloneUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-gssapiUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-snaky_hashUpgrade rubygem-oauth-ttyUpgrade rubygem-netrc | May 4, 2023 | Oct 16, 2022 |
| Debian | — | Upgrade python-django | Nov 4, 2022 | Oct 16, 2022 |
| Freebsd | — | Upgrade py38-django32Upgrade py310-django40Upgrade py37-django32Upgrade py310-django32Upgrade py39-django41Upgrade py310-django41Upgrade py39-django40Upgrade py39-django32Upgrade py38-django41Upgrade py38-django40 | Nov 4, 2022 | Oct 6, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cliUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-jwtUpgrade foreman-cliUpgrade rubygem-localeUpgrade rubygem-oauthUpgrade rubygem-rest-clientUpgrade rubygem-http-cookieUpgrade rubygem-version_gemUpgrade rubygem-fast_gettextUpgrade rubygem-gssapiUpgrade rubygem-highlineUpgrade rubygem-mime-types-dataUpgrade rubygem-foreman_maintainUpgrade rubygem-snaky_hashUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-amazing_printUpgrade rubygem-clampUpgrade rubygem-oauth-ttyUpgrade rubygem-hashieUpgrade rubygem-unf_extUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-domain_nameUpgrade rubygem-unfUpgrade rubygem-ffi-debuginfoUpgrade rubygem-ffi-debugsourceUpgrade rubygem-little-pluggerUpgrade rubygem-loggingUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-powerbarUpgrade rubygem-multi_jsonUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-http-acceptUpgrade rubygem-mime-typesUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-maintainUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-cliUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-apipie-bindings | May 4, 2023 | Oct 16, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxx | Mar 12, 2024 | Oct 16, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Oct 16, 2022 |
| Ubuntu | — | Upgrade python3-django | Oct 5, 2022 | Oct 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub