1
0
mirror of https://github.com/django/django.git synced 2025-07-10 20:59:12 +00:00

2 Commits

Author SHA1 Message Date
Mariusz Felisiak
e7c3a2ccc3 [4.1.x] Fixed CVE-2023-31047, Fixed #31710 -- Prevented potential bypass of validation when uploading multiple files using one form field.
Thanks Moataz Al-Sharida and nawaik for reports.

Co-authored-by: Shai Berger <shai@platonix.com>
Co-authored-by: nessita <124304+nessita@users.noreply.github.com>
2023-05-03 13:54:21 +02:00
Mariusz Felisiak
6d334a0ca5 [4.1.x] Added stub release notes for 4.1.9 and 3.2.19.
Backport of 18a7f2c711529f8e43c36190a5e2479f13899749 from main
2023-04-26 08:51:18 +02:00