PyPI/django-sendfile2: medium
Directory traversal outside of SENDFILE_ROOT in django-sendfile2
Action: Upgrade django-sendfile2 to 0.6.0 or later.
pip install django-sendfile2==0.6.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.6.0 | - |
Fixed versions
| 0.6.0 |
Sources
- osv: GHSA-6r3c-8xf3-ggrr
- https://github.com/moggers87/django-sendfile2/security/advisories/GHSA-6r3c-8xf3-ggrr
- https://github.com/moggers87/django-sendfile2/commit/f870c52398a55b9b5189932dd8caa24efb4bc1e1
- https://github.com/moggers87/django-sendfile2
published · modified · JSON