{"action":"Upgrade django to 3.2.16 or later.","affected":[{"fixed":"3.2.16","introduced":"3.2"},{"fixed":"4.0.8","introduced":"4.0"},{"fixed":"4.1.2","introduced":"4.1"}],"component":"django","cve_ids":["CVE-2022-41323"],"ecosystem":"PyPI","epss":0.03751,"exploited":false,"fixed_versions":["3.2.16","4.0.8","4.1.2"],"ghsa_id":"GHSA-qrw5-5h28-6cmg","id":"tcs_01M5KFWNAD5HCE66237R4Y2EB2","modified_at":"2024-09-20T15:48:03.376641Z","published_at":"2022-10-16T12:00:23Z","references":["https://osv.dev/vulnerability/GHSA-qrw5-5h28-6cmg","https://nvd.nist.gov/vuln/detail/CVE-2022-41323","https://github.com/django/django/commit/23f0093125ac2e553da6c1b2f9988eb6a3dd2ea1","https://github.com/django/django/commit/5b6b257fa7ec37ff27965358800c67e2dd11c924","https://github.com/django/django/commit/9d656ea51d9ea7105c0c0785783ac29d426a7d25","https://docs.djangoproject.com/en/4.0/releases/security","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2022-304.yaml","https://groups.google.com/forum/#!forum/django-announce","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FKYVMMR7RPM6AHJ2SBVM2LO6D3NGFY7B","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/HWY6DQWRVBALV73BPUVBXC3QIYUM24IK","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LTZVAKU5ALQWOKFTPISE257VCVIYGFQI","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VZS4G6NSZWPTVXMMZHJOJVQEPL3QTO77","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YJB6FUBBLVKKG655UMTLQNN6UQ6EDLSP","https://security.netapp.com/advisory/ntap-20221124-0001","https://www.djangoproject.com/weblog/2022/oct/04/security-releases"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-qrw5-5h28-6cmg","url":"https://osv.dev/vulnerability/GHSA-qrw5-5h28-6cmg"}],"summary":"Django denial-of-service vulnerability in internationalized URLs"}