In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Oct 16, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 16, 2022 |
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-version_gemUpgrade rubygem-oauthUpgrade rubygem-domain_nameUpgrade foreman-cliUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_ext-debuginfoUpgrade satellite-cliUpgrade rubygem-highlineUpgrade python39-pulp_manifestUpgrade rubygem-unf_extUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-rest-clientUpgrade rubygem-localeUpgrade rubygem-powerbarUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cliUpgrade rubygem-ffi-debuginfoUpgrade rubygem-oauth-ttyUpgrade rubygem-netrcUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-little-pluggerUpgrade satellite-cloneUpgrade rubygem-loggingUpgrade rubygem-unicodeUpgrade satellite-maintainUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-mime-types-dataUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unfUpgrade rubygem-fast_gettextUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-http-acceptUpgrade rubygem-mime-typesUpgrade rubygem-unicode-debuginfoUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-apipie-bindingsUpgrade rubygem-snaky_hash | May 4, 2023 | Oct 16, 2022 |
| Debian | — | Upgrade python-django | Nov 4, 2022 | Oct 16, 2022 |
| Freebsd | — | Upgrade py310-django41Upgrade py39-django40Upgrade py310-django40Upgrade py310-django32Upgrade py38-django32Upgrade py37-django32Upgrade py39-django41Upgrade py38-django40Upgrade py39-django32Upgrade py38-django41 | Nov 4, 2022 | Oct 6, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unicode-display_widthUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-maintainUpgrade rubygem-http-acceptUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-apipie-bindingsUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-ffiUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_extUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unicode-debuginfoUpgrade rubygem-oauth-ttyUpgrade rubygem-ffi-debugsourceUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hashieUpgrade rubygem-gssapiUpgrade rubygem-amazing_printUpgrade rubygem-localeUpgrade rubygem-clampUpgrade rubygem-oauthUpgrade rubygem-http-cookieUpgrade rubygem-jwtUpgrade rubygem-version_gemUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-cloneUpgrade rubygem-snaky_hashUpgrade rubygem-rest-clientUpgrade rubygem-loggingUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-foreman_maintainUpgrade foreman-cliUpgrade python39-pulp_manifestUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli | May 4, 2023 | Oct 16, 2022 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-debuginfo | Mar 12, 2024 | Oct 16, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Oct 16, 2022 |
| Ubuntu | — | Upgrade python3-django | Oct 5, 2022 | Oct 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub