Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[general] Apply additional validation in overwrite path #1486

Merged
merged 1 commit into from
Feb 15, 2025

Conversation

jschneier
Copy link
Owner

Fix for CVE-2024-39330 that I reported earlier, Django relied on non-overridden get_available_name for security which was overridden in this library. This is fixed on 4.2+.

@jschneier jschneier force-pushed the josh/validate-filename-in-overwrite-path branch from 46a0f34 to 968fef1 Compare February 15, 2025 16:40
@jschneier jschneier force-pushed the josh/validate-filename-in-overwrite-path branch from 968fef1 to 7e843b2 Compare February 15, 2025 16:43
@jschneier jschneier merged commit 5db357a into master Feb 15, 2025
20 checks passed
@jschneier jschneier deleted the josh/validate-filename-in-overwrite-path branch February 15, 2025 16:45
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant