diff options
| author | Mariusz Felisiak <felisiak.mariusz@gmail.com> | 2021-01-22 12:23:18 +0100 |
|---|---|---|
| committer | Mariusz Felisiak <felisiak.mariusz@gmail.com> | 2021-02-01 09:14:54 +0100 |
| commit | 21e7622dec1f8612c85c2fc37fe8efbfd3311e37 (patch) | |
| tree | f57e31e576366ce76bea8a1d2e5bed6a223d3d9c /django/__init__.py | |
| parent | ee9d623831681b7130565e4d58933861a660a82f (diff) | |
[2.2.x] Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().
Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews.
Thanks Wang Baohua for the report.
Backport of 05413afa8c18cdb978fcdf470e09f7a12b234a23 from master.
Diffstat (limited to 'django/__init__.py')
0 files changed, 0 insertions, 0 deletions