https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-30T06:53:35.117882+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-33033 CVE-2026-33033 — Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload 2026-09-30T06:53:35.214810+00:00

Affected: djangoproject Django

An issue was discovered in 6.0 before 6.0.4, 5.2 before 5.2.13, and 4.2 before 4.2.30. `MultiPartParser` allows remote attackers to degrade performance by submitting multipart uploads with `Content-Transfer-Encoding: base64` including excessive whitespace. Earlier, unsupported Django series (such as 5.0.x, 4.1.x, and 3.2.x) were not evaluated and may also be affected. Django would like to thank Seokchan Yoon for reporting this issue.