{"action":"Upgrade django to 3.2.16 or later.","affected":[{"fixed":"3.2.16","introduced":"3.2"},{"fixed":"4.0.8","introduced":"4.0"},{"fixed":"4.1.2","introduced":"4.1"}],"component":"django","cve_ids":["CVE-2022-41323"],"ecosystem":"PyPI","epss":0.03751,"exploited":false,"fixed_versions":["3.2.16","4.0.8","4.1.2"],"ghsa_id":"GHSA-qrw5-5h28-6cmg","id":"tcs_01M5KGH3RVA0ZETJ8NRCCP9AKK","modified_at":"2026-06-10T17:01:02.167352048Z","published_at":"2022-10-16T06:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-304","https://docs.djangoproject.com/en/4.0/releases/security/","https://github.com/django/django/commit/5b6b257fa7ec37ff27965358800c67e2dd11c924","https://www.djangoproject.com/weblog/2022/oct/04/security-releases/","https://groups.google.com/forum/#!forum/django-announce","https://github.com/advisories/GHSA-qrw5-5h28-6cmg"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-304","url":"https://osv.dev/vulnerability/PYSEC-2022-304"}],"summary":"In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular"}