An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Feb 15, 2023 |
| Centos_linux | — | Upgrade rubygem-gssapiUpgrade foreman-cliUpgrade rubygem-hammer_cliUpgrade rubygem-snaky_hashUpgrade rubygem-localeUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-ffi-debuginfoUpgrade rubygem-rest-clientUpgrade rubygem-amazing_printUpgrade rubygem-jwtUpgrade rubygem-mime-types-dataUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-version_gemUpgrade rubygem-hashieUpgrade rubygem-highlineUpgrade rubygem-clampUpgrade rubygem-foreman_maintainUpgrade rubygem-unfUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-mime-typesUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foremanUpgrade satellite-maintainUpgrade rubygem-oauth-ttyUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_googleUpgrade satellite-cloneUpgrade satellite-cliUpgrade python39-pulp_manifestUpgrade rubygem-netrcUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-apipie-bindingsUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-multi_jsonUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-little-pluggerUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-ffi | May 4, 2023 | Feb 15, 2023 |
| Debian | — | Upgrade python-django | Feb 22, 2023 | Feb 15, 2023 |
| Freebsd | — | Upgrade py39-django40Upgrade py310-django40Upgrade py37-django32Upgrade py310-django32Upgrade py38-django32Upgrade py39-django41Upgrade py310-django41Upgrade py38-django41Upgrade py38-django40Upgrade py39-django32 | Feb 15, 2023 | Feb 14, 2023 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-unicode-debugsourceUpgrade rubygem-loggingUpgrade rubygem-fast_gettextUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-jwtUpgrade rubygem-multi_jsonUpgrade rubygem-little-pluggerUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-localeUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-oauth-ttyUpgrade rubygem-amazing_printUpgrade rubygem-http-acceptUpgrade rubygem-apipie-bindingsUpgrade satellite-cloneUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-ffi-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-version_gemUpgrade rubygem-powerbarUpgrade rubygem-clampUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unicode-display_widthUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade foreman-cliUpgrade satellite-maintainUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-netrcUpgrade rubygem-oauthUpgrade rubygem-unfUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unf_extUpgrade rubygem-rest-clientUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade python39-pulp_manifestUpgrade satellite-cliUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-ffiUpgrade rubygem-hashie | May 4, 2023 | Feb 15, 2023 |
| Rocky_linux | — | Upgrade libdb-cxxUpgrade libdb-cxx-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-debuginfoUpgrade libdb-utils-debuginfo | Mar 12, 2024 | Feb 15, 2023 |
| Suse | — | Upgrade python3-Django1Upgrade python3-django | Mar 1, 2023 | Feb 15, 2023 |
| Ubuntu | — | Upgrade python-djangoUpgrade python3-django | Mar 22, 2023 | Feb 15, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub