{"action":"Upgrade wagtail to 4.1.4 or later.","affected":[{"fixed":"4.2.2","introduced":"4.2"},{"fixed":"4.1.4","introduced":"0"}],"component":"wagtail","cve_ids":["CVE-2023-28837"],"ecosystem":"PyPI","epss":0.0107,"exploited":false,"fixed_versions":["4.2.2","4.1.4"],"ghsa_id":"GHSA-33pv-vcgh-jfg9","id":"tcs_01M5KETRQP8N538BKSXAZVTZ58","modified_at":"2026-09-10T03:49:53.230639651Z","published_at":"2023-04-03T19:18:09Z","references":["https://osv.dev/vulnerability/GHSA-33pv-vcgh-jfg9","https://github.com/wagtail/wagtail/security/advisories/GHSA-33pv-vcgh-jfg9","https://nvd.nist.gov/vuln/detail/CVE-2023-28837","https://github.com/wagtail/wagtail/commit/3c0c64642b9e5b8d28b111263c7f4bddad6c3880","https://github.com/wagtail/wagtail/commit/c9d2fcd650a88d76ae122646142245e5927a9165","https://github.com/wagtail/wagtail/commit/cfa11bbe00dbe7ce8cd4c0bbfe2a898a690df2bf","https://github.com/wagtail/wagtail/commit/d4022310cbe497993459c3136311467c7ac6329a","https://docs.wagtail.org/en/stable/reference/settings.html#wagtailimages-max-upload-size","https://github.com/pypa/advisory-database/tree/main/vulns/wagtail/PYSEC-2023-56.yaml","https://github.com/wagtail/wagtail","https://github.com/wagtail/wagtail/releases/tag/v4.1.4","https://github.com/wagtail/wagtail/releases/tag/v4.2.2"],"severity":{"label":"medium","score":4.4},"sources":[{"source":"osv","source_id":"GHSA-33pv-vcgh-jfg9","url":"https://osv.dev/vulnerability/GHSA-33pv-vcgh-jfg9"}],"summary":"Wagtail vulnerable to denial-of-service via memory exhaustion when uploading large files"}