Natalia Bidart

Potential exposure of private data via missing Vary: Authorization in UpdateCacheMiddleware

Potential denial-of-service vulnerability in URLField via Unicode normalization on Windows

Potential exposure of private data via cached Set-Cookie response

Header injection possibility since DomainNameValidator accepted newlines in input

Potential denial-of-service vulnerability in ASGI requests via memory upload limit bypass

Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload

Potential incorrect permissions on newly created file system objects

Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods

Potential denial-of-service vulnerability in XML serializer text extraction

Potential SQL injection via _connector keyword argument in QuerySet and Q objects