Jacob Walls

Potential denial-of-service vulnerability in ASGI requests via file upload limit bypass

Potential denial-of-service vulnerability in ASGI requests via memory upload limit bypass

ASGI header spoofing via underscore/hyphen conflation

Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload

Privilege abuse in ModelAdmin.list_editable

Quadratic complexity in node ID cache clearing

Potential SQL injection via _connector keyword argument in QuerySet and Q objects

Potential denial-of-service vulnerability via repeated headers when using ASGI

Potential denial-of-service vulnerability in django.utils.text.Truncator HTML methods

Username enumeration through timing difference in mod_wsgi authentication handler