In Django 3.2 before 3.2.19, 4.x before 4.1.9, and 4.2 before 4.2.1, it was possible to bypass validation when using one form field to upload multiple files. This multiple upload has never been supported by forms.FileField or forms.ImageField (only the last uploaded file was validated). However, Django's "Uploading multiple files" documentation suggested otherwise.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade foreman-cliUpgrade rubygem-hammer_cliUpgrade rubygem-netrcUpgrade rubygem-unf_extUpgrade rubygem-rest-clientUpgrade rubygem-unicode-display_widthUpgrade rubygem-hashieUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-localeUpgrade rubygem-clampUpgrade rubygem-foreman_maintainUpgrade rubygem-gssapiUpgrade rubygem-oauthUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade satellite-maintainUpgrade python39-pulp_manifestUpgrade rubygem-version_gemUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-powerbarUpgrade rubygem-jwtUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-ffi-debuginfoUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-http-acceptUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-little-pluggerUpgrade rubygem-ffi-debugsourceUpgrade rubygem-unicode-debuginfoUpgrade rubygem-loggingUpgrade rubygem-snaky_hashUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-cloneUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade rubygem-mime-types-dataUpgrade rubygem-mime-typesUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-multi_jsonUpgrade rubygem-oauth-ttyUpgrade rubygem-http-cookieUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-ffiUpgrade rubygem-fast_gettextUpgrade satellite-cliUpgrade rubygem-unfUpgrade rubygem-domain_nameUpgrade rubygem-amazing_print | Nov 1, 2023 | May 7, 2023 |
| Debian | — | Upgrade python-django | May 8, 2023 | May 7, 2023 |
| Freebsd | — | Upgrade py38-django32Upgrade py39-django32Upgrade py37-django32Upgrade py311-django32Upgrade py39-django41Upgrade py310-django42Upgrade py311-django41Upgrade py39-django42Upgrade py310-django32Upgrade py38-django41Upgrade py310-django41Upgrade py311-django42Upgrade py38-django42 | Dec 10, 2025 | May 5, 2023 |
| Redhat_linux | — | Upgrade rubygem-hashieUpgrade rubygem-netrcUpgrade rubygem-powerbarUpgrade rubygem-hammer_cli_foreman_adminUpgrade rubygem-hammer_cli_foremanUpgrade rubygem-mime-types-dataUpgrade rubygem-hammer_cli_foreman_virt_who_configureUpgrade satellite-cliUpgrade rubygem-hammer_cli_foreman_tasksUpgrade rubygem-unfUpgrade satellite-maintainUpgrade rubygem-foreman_maintainUpgrade rubygem-little-pluggerUpgrade rubygem-unf_ext-debuginfoUpgrade rubygem-hammer_cli_foreman_openscapUpgrade rubygem-unf_ext-debugsourceUpgrade rubygem-multi_jsonUpgrade rubygem-ffiUpgrade rubygem-hammer_cli_foreman_templatesUpgrade rubygem-mime-typesUpgrade rubygem-unicode-display_widthUpgrade rubygem-oauth-ttyUpgrade rubygem-ffi-debugsourceUpgrade rubygem-hammer_cliUpgrade rubygem-unicode-debugsourceUpgrade rubygem-unicodeUpgrade rubygem-rest-clientUpgrade rubygem-jwtUpgrade rubygem-oauthUpgrade rubygem-unf_extUpgrade rubygem-ffi-debuginfoUpgrade foreman-cliUpgrade rubygem-http-acceptUpgrade rubygem-hammer_cli_foreman_googleUpgrade rubygem-highlineUpgrade rubygem-hammer_cli_katelloUpgrade rubygem-hammer_cli_foreman_discoveryUpgrade rubygem-clampUpgrade rubygem-version_gemUpgrade python39-pulp_manifestUpgrade rubygem-domain_nameUpgrade rubygem-unicode-debuginfoUpgrade rubygem-hammer_cli_foreman_webhooksUpgrade satellite-cloneUpgrade rubygem-amazing_printUpgrade rubygem-apipie-bindingsUpgrade rubygem-hammer_cli_foreman_bootdiskUpgrade rubygem-hammer_cli_foreman_ansibleUpgrade rubygem-gssapiUpgrade rubygem-hammer_cli_foreman_remote_executionUpgrade rubygem-loggingUpgrade rubygem-fast_gettextUpgrade rubygem-localeUpgrade rubygem-hammer_cli_foreman_azure_rmUpgrade rubygem-http-cookieUpgrade rubygem-snaky_hash | Nov 1, 2023 | May 7, 2023 |
| Rocky_linux | — | Upgrade libdb-debugsourceUpgrade libdb-cxx-debuginfoUpgrade libdb-sql-devel-debuginfoUpgrade libdb-utils-debuginfoUpgrade libdb-sql-debuginfoUpgrade libdb-cxxUpgrade libdb-debuginfo | Mar 5, 2024 | May 7, 2023 |
| Suse | — | Upgrade python3-django | Jul 17, 2023 | May 7, 2023 |
| Ubuntu | — | Upgrade python3-django (Ubuntu Pro)Upgrade python-django (Ubuntu Pro)Upgrade python3-djangoUpgrade python-django-doc (Ubuntu Pro)Upgrade python-django | May 4, 2023 | May 3, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub