Skip to content
OpenAdvisories

Archive

7 May 2023

Vulnerabilities first published on this day (UTC), newest first.

2 results · Clear filters · Feed

  • Critical 9.8

    Django bypasses validation when using one form field to upload multiple files

    In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last u…

  • Critical 10.0
    CVE-2023-2564 EPSS 41%

    OS Command Injection in sbs20/scanservjs

    OS Command Injection in GitHub repository sbs20/scanservjs prior to v2.27.0.