1. ===========================

  2. Django 4.0.10 release notes

  3. ===========================

  4. 

  5. *February 14, 2023*

  6. 

  7. Django 4.0.10 fixes a security issue with severity "moderate" in 4.0.9.

  8. 

  9. CVE-2023-24580: Potential denial-of-service vulnerability in file uploads

  10. =========================================================================

  11. 

  12. Passing certain inputs to multipart forms could result in too many open files

  13. or memory exhaustion, and provided a potential vector for a denial-of-service

  14. attack.

  15. 

  16. The number of files parts parsed is now limited via the new

  17. :setting:`DATA_UPLOAD_MAX_NUMBER_FILES` setting.
About Sign Up Leave Feedback Contact