An issue was discovered in the Multipart Request Parser in Django 3.2 before 3.2.18, 4.0 before 4.0.10, and 4.1 before 4.1.7. Passing certain inputs (e.g., an excessive number of parts) to multipart forms could result in too many open files or memory exhaustion, and provided a potential vector for a denial-of-service attack.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade py3-django | Aug 22, 2024 | Feb 15, 2023 |
| Centos_linux | — | Upgrade satellite-cliUpgrade python39-pulp_manifestUpgrade rubygem-little-pluggerUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade satellite-maintainUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-unicode-debugsourceUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-cloneUpgrade rubygem-http-acceptUpgrade rubygem-netrcUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_extUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-oauth-ttyUpgrade rubygem-domain_nameUpgrade rubygem-powerbarUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-unicodeUpgrade rubygem-multi_jsonUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-loggingUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-jwtUpgrade rubygem-rest-clientUpgrade rubygem-hashieUpgrade rubygem-unfUpgrade rubygem-foreman_maintainUpgrade rubygem-hammer_cliUpgrade rubygem-clampUpgrade foreman-cliUpgrade rubygem-fast_gettextUpgrade rubygem-ffi-debugsourceUpgrade rubygem-localeUpgrade rubygem-gssapiUpgrade rubygem-highlineUpgrade rubygem-version_gemUpgrade rubygem-amazing_printUpgrade rubygem-mime-types-dataUpgrade rubygem-unicode-debuginfoUpgrade rubygem-snaky_hashUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-ffi-debuginfo | May 4, 2023 | Feb 15, 2023 |
| Debian | — | Upgrade python-django | Feb 22, 2023 | Feb 15, 2023 |
| Freebsd | — | Upgrade py37-django32Upgrade py310-django40Upgrade py39-django40Upgrade py310-django32Upgrade py38-django32Upgrade py39-django41Upgrade py39-django32Upgrade py38-django41Upgrade py310-django41Upgrade py38-django40 | Feb 15, 2023 | Feb 14, 2023 |
| Gentoo Linux | — | Upgrade dev-python/django. | Sep 18, 2025 | Sep 17, 2025 |
| Redhat_linux | — | Upgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-fast_gettextUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-hammer_cli_foreman_googleUpgrade satellite-cloneUpgrade rubygem-amazing_printUpgrade rubygem-http-acceptUpgrade rubygem-snaky_hashUpgrade rubygem-localeUpgrade rubygem-oauth-ttyUpgrade rubygem-apipie-bindingsUpgrade rubygem-multi_jsonUpgrade rubygem-little-pluggerUpgrade rubygem-ffi-debugsourceUpgrade rubygem-jwtUpgrade rubygem-ffi-debuginfoUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-mime-typesUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade rubygem-loggingUpgrade rubygem-gssapiUpgrade rubygem-unicode-debugsourceUpgrade rubygem-hammer_cliUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade python39-pulp_manifestUpgrade satellite-cliUpgrade rubygem-powerbarUpgrade rubygem-foreman_maintainUpgrade rubygem-ffiUpgrade rubygem-hashieUpgrade foreman-cliUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_tasksUpgrade satellite-maintainUpgrade rubygem-mime-types-dataUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-netrcUpgrade rubygem-highlineUpgrade rubygem-version_gemUpgrade rubygem-http-cookieUpgrade rubygem-unfUpgrade rubygem-unicode-display_widthUpgrade rubygem-unf_extUpgrade rubygem-domain_nameUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-rest-clientUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-clamp | May 4, 2023 | Feb 15, 2023 |
| Rocky_linux | — | Upgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-debugsourceUpgrade libdb-sql-debuginfoUpgrade libdb-debuginfoUpgrade libdb-cxx-debuginfoUpgrade libdb-cxx | Mar 12, 2024 | Feb 15, 2023 |
| Suse | — | Upgrade python3-djangoUpgrade python3-Django1 | Mar 1, 2023 | Feb 15, 2023 |
| Ubuntu | — | Upgrade python-djangoUpgrade python3-django | Mar 22, 2023 | Feb 15, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub