tocsin

PyPI/django CVE-2022-23833: unknown, EPSS 49.53%

An issue was discovered in MultiPartParser in Django 2.2 before 2.2.27, 3.2 before 3.2.12, and 4.0 before 4.0.2. Passing certain inputs to multipart forms could result in an infinite loop when parsing

Action: Upgrade django to 2.2.27 or later.

pip install django==2.2.27
pip install django==3.2.12
pip install django==4.0.2

Affected

introducedfixedlast affected
2.22.2.27-
3.23.2.12-
4.04.0.2-

Fixed versions

2.2.273.2.124.0.2

Sources

CVE-2022-23833 · published · modified · JSON