tocsin

CVE-2023-24580

2 advisories.

PyPI/django CVE-2023-24580: high 7.5

Resource exhaustion in Django

Action: Upgrade django to 3.2.18 or later.

pip install django==3.2.18
pip install django==4.1.7
pip install django==4.0.10

Affected

introducedfixedlast affected
3.2a13.2.18-
4.1a14.1.7-
4.0a14.0.10-

Fixed versions

3.2.184.1.74.0.10

Sources

CVE-2023-24580 · published · modified · JSON

PyPI/django CVE-2023-24580: unknown

An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart f

Action: Upgrade django to 3.2.18 or later.

pip install django==3.2.18
pip install django==4.0.10
pip install django==4.1.7

Affected

introducedfixedlast affected
3.23.2.18-
4.04.0.10-
4.14.1.7-

Fixed versions

3.2.184.0.104.1.7

Sources

CVE-2023-24580 · published · modified · JSON