{"action":"Upgrade python-django to 3:3.2.18-1 or later.","affected":[{"fixed":"3:3.2.18-1","introduced":"0"}],"component":"python-django","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:14","exploited":false,"fixed_versions":["3:3.2.18-1"],"id":"tcs_01M5NHXBKHESEXE6AWRV28F539","modified_at":"2026-10-23T18:04:22.907037385Z","published_at":"2023-02-15T01:15:10.687Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-24580","https://security-tracker.debian.org/tracker/CVE-2023-24580"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-24580#Debian:14/python-django","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-24580"}],"summary":"An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart f"}