Skip to content
OpenAdvisories
High DLA-2651-1 1 CVE

python-django - security update

Published May 6, 2021 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 9 python-django 1:1.10.7-2+deb9u13

Vulnerabilities 1

  • High 7.5
    CVE-2021-31542

    Path Traversal in Django

    In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded files with suitably crafted file names.

    python-django django python-django Debian Ubuntu PyPI