{"action":"Upgrade django to 1.3.2 or later.","affected":[{"fixed":"1.3.2","introduced":"0"},{"fixed":"1.4.1","introduced":"1.4"}],"component":"django","cve_ids":["CVE-2012-3443"],"ecosystem":"PyPI","epss":0.02715,"exploited":false,"fixed_versions":["1.3.2","1.4.1"],"ghsa_id":"GHSA-59w8-4wm2-4xw8","id":"tcs_01M5KG5NNH0BVVGTQQB5EYTJ2J","modified_at":"2026-06-10T17:00:53.780815757Z","published_at":"2012-07-31T17:55:00Z","references":["https://osv.dev/vulnerability/PYSEC-2012-3","http://www.openwall.com/lists/oss-security/2012/07/31/2","http://www.openwall.com/lists/oss-security/2012/07/31/1","https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/","http://www.ubuntu.com/usn/USN-1560-1","http://www.debian.org/security/2012/dsa-2529","http://www.mandriva.com/security/advisories?name=MDVSA-2012:143","https://github.com/advisories/GHSA-59w8-4wm2-4xw8"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2012-3","url":"https://osv.dev/vulnerability/PYSEC-2012-3"}],"summary":"The django.forms.ImageField class in the form system in Django before 1.3.2 and 1.4.x before 1.4.1 completely decompresses image data during image validation, which allows remote attackers to cause a"}