Skip to content
OpenAdvisories

Package · PyPI

django-sendfile2

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High —
    GHSA-pcjh-6r5h-r92r

    django-sendfile2 before 0.7.0 contains reflected file download vulnerability

    Similar to CVE-2022-36359 for Django, django-sendfile2 did not protect against a reflected file download attack in version 0.6.1 and earlier. If the file name used by django-sendfile2 was derived from user input, then it would be possible to perform a such an…

    django-sendfile2 PyPI