Django 3.1.8 release notes — Django documentation

From Get docs
Django/docs/3.1.x/releases/3.1.8

Django 3.1.8 release notes

April 6, 2021

Django 3.1.8 fixes a security issue with severity “low” and a bug in 3.1.7.

CVE-2021-28658: Potential directory-traversal via uploaded files

MultiPartParser allowed directory-traversal via uploaded files with suitably crafted file names.

Built-in upload handlers were not affected by this vulnerability.


Bugfixes

  • Fixed a bug in Django 3.1 where the output was hidden on a test error or failure when using test --pdb with the --buffer option (:ticket:`32560`).



Retrieved from "https://getdocs.org/index.php?title=Django/docs/3.1.x/releases/3.1.8&oldid=38081"
Powered by MediaWiki