{"action":"Upgrade python-django to 3:3.2.19-1 or later.","affected":[{"fixed":"3:3.2.19-1","introduced":"0"}],"component":"python-django","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["3:3.2.19-1"],"id":"tcs_01M5NJ1KH30408WVZQYAE2DP87","modified_at":"2026-10-23T18:04:23.939316552Z","published_at":"2023-05-07T02:15:08.917Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2023-31047","https://security-tracker.debian.org/tracker/CVE-2023-31047"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2023-31047","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2023-31047"}],"summary":"In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been suppor"}