The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
In Django 3.2 before 3.2.17, 4.0 before 4.0.9, and 4.1 before 4.1.6, the parsed values of Accept-Language headers are cached in order to avoid repetitive parsing. This leads to a potential denial-of-service vector via excessive memory usage if the raw value of Accept-Language headers is very large.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Feb 1, 2023 |
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-netrcUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_tasksUpgrade foreman-cliUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-oauthUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicode-display_widthUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hashieUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-highlineUpgrade rubygem-rest-clientUpgrade satellite-cliUpgrade python39-pulp_manifestUpgrade rubygem-ffiUpgrade rubygem-foreman_maintainUpgrade satellite-maintainUpgrade rubygem-mime-types-dataUpgrade rubygem-powerbarUpgrade rubygem-unfUpgrade rubygem-oauth-ttyUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-gssapiUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicode-debugsourceUpgrade rubygem-multi_jsonUpgrade rubygem-localeUpgrade rubygem-ffi-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-amazing_printUpgrade rubygem-hammer_cliUpgrade rubygem-loggingUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-http-acceptUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-mime-typesUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foreman_openscap | May 4, 2023 | Feb 1, 2023 |
| Debian | — | Upgrade python-django | Feb 3, 2023 | Feb 1, 2023 |
| Freebsd | — | Upgrade py310-django41Upgrade py38-django41Upgrade py39-django41Upgrade py38-django40Upgrade py38-django32Upgrade py310-django40Upgrade py39-django40Upgrade py39-django32Upgrade py310-django32Upgrade py37-django32 | Feb 7, 2023 | Feb 6, 2023 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-mime-types-dataUpgrade rubygem-unfUpgrade rubygem-mime-typesUpgrade rubygem-ffiUpgrade satellite-cloneUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-jwtUpgrade rubygem-unicodeUpgrade rubygem-little-pluggerUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-oauth-ttyUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-unicode-debugsourceUpgrade rubygem-amazing_printUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-domain_nameUpgrade rubygem-loggingUpgrade rubygem-fast_gettextUpgrade rubygem-unf_extUpgrade rubygem-netrcUpgrade rubygem-http-cookieUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-localeUpgrade rubygem-clampUpgrade satellite-maintainUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-version_gemUpgrade rubygem-hashieUpgrade rubygem-gssapiUpgrade rubygem-hammer_cliUpgrade python39-pulp_manifestUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-powerbarUpgrade rubygem-foreman_maintainUpgrade rubygem-unicode-display_width | May 4, 2023 | Feb 1, 2023 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-debugsourceUpgrade libdb-utils-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxxUpgrade libdb-sql-debuginfo | Mar 12, 2024 | Feb 1, 2023 |
| Suse | — | Upgrade python3-django | Feb 22, 2023 | Feb 1, 2023 |
| Ubuntu | — | Upgrade python-djangoUpgrade python3-djangoUpgrade python3-django (Ubuntu Pro)Upgrade python-django (Ubuntu Pro) | Mar 22, 2023 | Feb 1, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub