CVE-2022-41323: Djangoproject Django

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression.

Affected products

• Djangoproject Django: from 3.2, before 3.2.16 (fixed in 3.2.16); from 4.0, before 4.0.8 (fixed in 4.0.8); from 4.1, before 4.1.2 (fixed in 4.1.2)

Published 2022-10-16. Last modified 2026-06-17.