| Package | Affected versions | Patched versions |
|---|---|---|
| django | ≥ 2.2, < 2.2.26≥ 3.2, < 3.2.11≥ 4.0, < 4.0.1 | 2.2.263.2.114.0.1 |
| django | ≥ 2.2, < 2.2.26≥ 3.2, < 3.2.11≥ 4.0, < 4.0.1 | 2.2.263.2.114.0.1 |
Storage.save in Django 2.2 before 2.2.26, 3.2 before 3.2.11, and 4.0 before 4.0.1 allows directory traversal if crafted filenames are directly passed to it.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free