Skip to content
OpenAdvisories

Package · PyPI

django-sendfile2

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-6r3c-8xf3-ggrr

    Directory traversal outside of SENDFILE_ROOT in django-sendfile2

    django-sendfile2 currently relies on the backend to correctly limit file paths to `SENDFILE_ROOT`. This is not the case for the `simple` and `development` backends, it is also not necessarily the case for any of the other backends either (it's just an assumpt…

    django-sendfile2 PyPI