In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django's "Uploading multiple files" documentation suggested otherwise.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-version_gemUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_templatesUpgrade satellite-maintainUpgrade python39-pulp_manifestUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-unicode-display_widthUpgrade rubygem-gssapiUpgrade rubygem-foreman_maintainUpgrade rubygem-netrcUpgrade rubygem-hashieUpgrade rubygem-unf_extUpgrade rubygem-oauthUpgrade foreman-cliUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-clampUpgrade rubygem-localeUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-apipie-bindingsUpgrade rubygem-powerbarUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-snaky_hashUpgrade rubygem-unfUpgrade rubygem-oauth-ttyUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-ffiUpgrade rubygem-fast_gettextUpgrade rubygem-domain_nameUpgrade rubygem-little-pluggerUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-loggingUpgrade rubygem-ffi-debuginfoUpgrade rubygem-unicodeUpgrade rubygem-mime-typesUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-multi_jsonUpgrade satellite-cloneUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-amazing_print | Nov 1, 2023 | May 7, 2023 |
| Debian | — | Upgrade python-django | May 8, 2023 | May 7, 2023 |
| Freebsd | — | Upgrade py311-django42Upgrade py310-django41Upgrade py38-django42Upgrade py39-django42Upgrade py311-django41Upgrade py38-django41Upgrade py310-django32Upgrade py310-django42Upgrade py38-django32Upgrade py39-django32Upgrade py39-django41Upgrade py37-django32Upgrade py311-django32 | Dec 10, 2025 | May 5, 2023 |
| Redhat_linux | — | Upgrade satellite-maintainUpgrade rubygem-hashieUpgrade satellite-cliUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-powerbarUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-mime-types-dataUpgrade rubygem-oauth-ttyUpgrade rubygem-unfUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-ffiUpgrade rubygem-foreman_maintainUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-display_widthUpgrade rubygem-mime-typesUpgrade rubygem-unf_extUpgrade rubygem-fast_gettextUpgrade foreman-cliUpgrade rubygem-clampUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-oauthUpgrade rubygem-domain_nameUpgrade rubygem-unicode-debugsourceUpgrade python39-pulp_manifestUpgrade rubygem-unicodeUpgrade rubygem-snaky_hashUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-http-cookieUpgrade satellite-cloneUpgrade rubygem-rest-clientUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-gssapiUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-ffi-debuginfoUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cliUpgrade rubygem-apipie-bindingsUpgrade rubygem-amazing_printUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_foreman_remote_execution | Nov 1, 2023 | May 7, 2023 |
| Rocky_linux | — | Upgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxxUpgrade libdb-debugsourceUpgrade libdb-sql-devel-debuginfoUpgrade libdb-cxx-debuginfo | Mar 5, 2024 | May 7, 2023 |
| Suse | — | Upgrade python3-django | Jul 17, 2023 | May 7, 2023 |
| Ubuntu | — | Upgrade python3-django (Ubuntu Pro)Upgrade python-django (Ubuntu Pro)Upgrade python-django-doc (Ubuntu Pro)Upgrade python3-djangoUpgrade python-django | May 4, 2023 | May 3, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub