In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Oct 16, 2022 |
| Arch Linux | — | Upgrade to the latest version of Arch Linux | Jul 11, 2025 | Oct 16, 2022 |
| Centos_linux | — | Upgrade rubygem-little-pluggerUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-apipie-bindingsUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-netrcUpgrade rubygem-oauth-ttyUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-http-acceptUpgrade satellite-cloneUpgrade rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-fast_gettextUpgrade rubygem-unicode-debuginfoUpgrade rubygem-unicodeUpgrade rubygem-jwtUpgrade rubygem-unfUpgrade rubygem-unicode-debugsourceUpgrade rubygem-ffi-debuginfoUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_foreman_googleUpgrade satellite-maintainUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cliUpgrade rubygem-oauthUpgrade satellite-cliUpgrade rubygem-ffiUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-clampUpgrade rubygem-amazing_printUpgrade python39-pulp_manifestUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-domain_nameUpgrade rubygem-unf_extUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-unicode-display_widthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-powerbarUpgrade rubygem-version_gemUpgrade rubygem-http-cookieUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-locale | May 4, 2023 | Oct 16, 2022 |
| Debian | — | Upgrade python-django | Nov 4, 2022 | Oct 16, 2022 |
| Freebsd | — | Upgrade py39-django41Upgrade py310-django40Upgrade py310-django32Upgrade py38-django32Upgrade py37-django32Upgrade py39-django40Upgrade py310-django41Upgrade py39-django32Upgrade py38-django40Upgrade py38-django41 | Nov 4, 2022 | Oct 6, 2022 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-fast_gettextUpgrade rubygem-version_gemUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cliUpgrade rubygem-http-cookieUpgrade rubygem-jwtUpgrade rubygem-loggingUpgrade rubygem-oauthUpgrade rubygem-rest-clientUpgrade rubygem-gssapiUpgrade satellite-cloneUpgrade rubygem-unfUpgrade foreman-cliUpgrade rubygem-snaky_hashUpgrade rubygem-little-pluggerUpgrade rubygem-oauth-ttyUpgrade rubygem-clampUpgrade rubygem-unf_extUpgrade rubygem-amazing_printUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hashieUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-domain_nameUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_googleUpgrade python39-pulp_manifestUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-foreman_maintainUpgrade satellite-maintainUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-mime-typesUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-powerbarUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-apipie-bindingsUpgrade satellite-cliUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-ffiUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-unicode-display_width | May 4, 2023 | Oct 16, 2022 |
| Rocky_linux | — | Upgrade libdb-cxx-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debugsource | Mar 12, 2024 | Oct 16, 2022 |
| Suse | — | Upgrade python3-django | Jan 4, 2023 | Oct 16, 2022 |
| Ubuntu | — | Upgrade python3-django | Oct 5, 2022 | Oct 4, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub