CVE-2022-24840

Advisory

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

[This affected versions has been limited. Please create a free account to view the full affected versions.]

Fixed versions

[This fixed versions has been limited. Please create a free account to view the full fixed versions.]

Vulnerability changelog

What's Changed


* [Fix CVE-2022-24840 -- Fix Path Traversal security vulnerability](https://github.com/codingjoe/django-s3file/security/advisories/GHSA-4w8f-hjm9-xwgf)
* Add back Python 3.8 support by symroe in https://github.com/codingjoe/django-s3file/pull/215

**Full Changelog**: https://github.com/codingjoe/django-s3file/compare/5.5.0...5.5.1

Resources

• https://pypi.org/project/django-s3file
• https://pyup.io/changelogs/django-s3file/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24840
• https://github.com/codingjoe/django-s3file/commit/68ccd2c621a40eb66fdd6af2be9d5fcc9c373318
• https://github.com/codingjoe/django-s3file/security/advisories/GHSA-4w8f-hjm9-xwgf