Natalia Bidart

Potential denial-of-service vulnerability via nested geometry collections

Potential denial-of-service vulnerability in HTTP header parsing

Privilege abuse in model formsets with editable primary keys

Potential denial-of-service vulnerability in check_for_language()

Server-side file-write and request forgery via spatial lookups

Potential cross-site scripting via URLField values in the admin

Potential exposure of private data via case-sensitive Cache-Control directives in UpdateCacheMiddleware

Potential unencrypted email transmission via STARTTLS in the SMTP backend

Signed cookie salt namespace collision in django.http.HttpRequest.get_signed_cookie

Potential exposure of private data via whitespace padding in Vary header