1. ==========================

  2. Django 3.1.8 release notes

  3. ==========================

  4. 

  5. *April 6, 2021*

  6. 

  7. Django 3.1.8 fixes a security issue with severity "low" and a bug in 3.1.7.

  8. 

  9. CVE-2021-28658: Potential directory-traversal via uploaded files

  10. ================================================================

  11. 

  12. ``MultiPartParser`` allowed directory-traversal via uploaded files with

  13. suitably crafted file names.

  14. 

  15. Built-in upload handlers were not affected by this vulnerability.

  16. 

  17. Bugfixes

  18. ========

  19. 

  20. * Fixed a bug in Django 3.1 where the output was hidden on a test error or

  21.   failure when using :option:`test --pdb` with the

  22.   :option:`--buffer <test --buffer>` option (:ticket:`32560`).
About Sign Up Leave Feedback Contact