tocsin

Alpine/py3-django: high 8.8

An issue was discovered in the HTTP FileResponse class in Django 3.2 before 3.2.15 and 4.0 before 4.0.7. An application is vulnerable to a reflected file download (RFD) attack that sets the Content-Di

Action: Upgrade py3-django to 3.2.16-r0 or later.

Affected

introducedfixedlast affected
03.2.16-r0-

Fixed versions

3.2.16-r0

Sources

published · modified · JSON