1. ==========================

  2. Django 4.1.7 release notes

  3. ==========================

  4. 

  5. *February 14, 2023*

  6. 

  7. Django 4.1.7 fixes a security issue with severity "moderate" and a bug in

  8. 4.1.6.

  9. 

  10. CVE-2023-24580: Potential denial-of-service vulnerability in file uploads

  11. =========================================================================

  12. 

  13. Passing certain inputs to multipart forms could result in too many open files

  14. or memory exhaustion, and provided a potential vector for a denial-of-service

  15. attack.

  16. 

  17. The number of files parts parsed is now limited via the new

  18. :setting:`DATA_UPLOAD_MAX_NUMBER_FILES` setting.

  19. 

  20. Bugfixes

  21. ========

  22. 

  23. * Fixed a bug in Django 4.1 that caused a crash of model validation on

  24.   ``ValidationError`` with no ``code`` (:ticket:`34319`).
About Sign Up Leave Feedback Contact