Skip to content
OpenAdvisories
Critical DLA-3415-1 1 CVE

python-django - security update

Published May 5, 2023 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 10 python-django 1:1.11.29-1+deb10u8

Vulnerabilities 1

  • Critical 9.8
    CVE-2023-31047

    Django bypasses validation when using one form field to upload multiple files

    In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last u…

    python-django django python-django Debian Ubuntu PyPI