CVE-2026-33033

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. "MultiPartParser" allows remote attackers to degrade performance by submitting multipart uploads with "Content-Transfer-Encoding: base64" including excessive whitespace. Earlier, unsupported Django series such ...