Allocation of Resources Without Limits or Throttling

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling in the parse method of MultiPartParser in django/http/multipartparser.py. An...

CVE-2026-33033

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. "MultiPartParser" allows remote attackers to degrade performance by submitting multipart uploads with "Content-Transfer-Encoding: base64" including excessive whitespace. Earlier, unsupported Django series such ...