The internationalization (i18n) framework in Django 0.91 0.95 0.95.1 and 0.96 and as used in other products such as PyLucid when the USE_I18N option and the i18n component are enabled allows remote attackers to cause a denial of service (memory consumption) via many HTTP requests with large Accept-Language headers.