https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 07:20:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2023-03582 bdu:2023-03582 https://cve.radiocsirt.org/vuln/bdu:2023-03582 https://cve.radiocsirt.org/vuln/bit-django-2023-31047 <p><strong>Affected:</strong> Bitnami: django</p> <p>In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&#39;s &#34;Uploading multiple files&#34; documentation suggested otherwise.</p> <p><strong>Affected:</strong> Bitnami: django</p> <p>In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&#39;s &#34;Uploading multiple files&#34; documentation suggested otherwise.</p> https://cve.radiocsirt.org/vuln/bit-django-2023-31047 https://cve.radiocsirt.org/vuln/euvd-2026-212546 EUVD-2026-212546 https://cve.radiocsirt.org/vuln/euvd-2026-212546 https://cve.radiocsirt.org/vuln/fkie_cve-2023-31047 <p>In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&#39;s &#34;Uploading multiple files&#34; documentation suggested otherwise.</p> <p>In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&#39;s &#34;Uploading multiple files&#34; documentation suggested otherwise.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2023-31047 https://cve.radiocsirt.org/vuln/ghsa-r3xc-prgr-mg9p <p><strong>Affected:</strong> PyPI: Django</p> <p>In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&#39;s &#34;Uploading multiple files&#34; documentation suggested otherwise.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&#39;s &#34;Uploading multiple files&#34; documentation suggested otherwise.</p> https://cve.radiocsirt.org/vuln/ghsa-r3xc-prgr-mg9p https://cve.radiocsirt.org/vuln/gsd-2023-31047 gsd-2023-31047 https://cve.radiocsirt.org/vuln/gsd-2023-31047 https://cve.radiocsirt.org/vuln/oesa-2023-1286 <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: python-django, openEuler:20.03-LTS-SP3: python-django, openEuler:22.03-LTS: python-django, openEuler:22.03-LTS-SP1: python-django</p> <p>A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&amp;apos;s &amp;quot;Uploading multiple files&amp;quot; documentation suggested otherwise.(CVE-2023-31047)</p> <p><strong>Affected:</strong> openEuler:20.03-LTS-SP1: python-django, openEuler:20.03-LTS-SP3: python-django, openEuler:22.03-LTS: python-django, openEuler:22.03-LTS-SP1: python-django</p> <p>A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&amp;apos;s &amp;quot;Uploading multiple files&amp;quot; documentation suggested otherwise.(CVE-2023-31047)</p> https://cve.radiocsirt.org/vuln/oesa-2023-1286 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12943-1 <p>python310-Django-4.2.1-1.1 on GA media</p> <p>python310-Django-4.2.1-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12943-1 https://cve.radiocsirt.org/vuln/pysec-2023-61 <p><strong>Affected:</strong> PyPI: django</p> <p>In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&#39;s &#34;Uploading multiple files&#34; documentation suggested otherwise.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&#39;s &#34;Uploading multiple files&#34; documentation suggested otherwise.</p> https://cve.radiocsirt.org/vuln/pysec-2023-61 https://cve.radiocsirt.org/vuln/rhsa-2023:4591 <p>sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) python-django: Potential bypass of validation when uploading multiple files using one form field</p> <p>sqlparse: Parser contains a regular expression that is vulnerable to ReDOS (Regular Expression Denial of Service) python-django: Potential bypass of validation when uploading multiple files using one form field</p> https://cve.radiocsirt.org/vuln/rhsa-2023:4591 https://cve.radiocsirt.org/vuln/suse-su-2023:2839-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/suse-su-2023:2839-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-31047 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django</p> <p>In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&#39;s &#34;Uploading multiple files&#34; documentation suggested otherwise.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django</p> <p>In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django&#39;s &#34;Uploading multiple files&#34; documentation suggested otherwise.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-31047 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1137 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Django ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Django ausnutzen, um Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1137