Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/python-django@3.2.16-1.0.1?arch=el8ui
purl pkg:rpm/redhat/python-django@3.2.16-1.0.1?arch=el8ui
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-7tca-pgcs-cuhd
Aliases:
BIT-django-2022-41323
CVE-2022-41323
GHSA-qrw5-5h28-6cmg
PYSEC-2022-304
In Django 3.2 before 3.2.16, 4.0 before 4.0.8, and 4.1 before 4.1.2, internationalized URLs were subject to a potential denial of service attack via the locale parameter, which is treated as a regular expression. There are no reported fixed by versions.
VCID-mzdk-m12w-q3fc
Aliases:
BIT-django-2021-44420
CVE-2021-44420
GHSA-v6rh-hp5x-86rv
PYSEC-2021-439
In Django 2.2 before 2.2.25, 3.1 before 3.1.14, and 3.2 before 3.2.10, HTTP requests for URLs with trailing newlines could bypass upstream access control based on URL paths. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:00:55.550310+00:00 RedHat Importer Affected by VCID-mzdk-m12w-q3fc https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2021-44420.json 38.0.0
2026-04-01T13:56:53.433890+00:00 RedHat Importer Affected by VCID-7tca-pgcs-cuhd https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2022-41323.json 38.0.0