Django 3.1.8 版本发行说明

April 6, 2021

Django 3.1.8 fixes a security issue with severity “low” and a bug in 3.1.7.

CVE-2021-28658: Potential directory-traversal via uploaded files

MultiPartParser allowed directory-traversal via uploaded files with suitably crafted file names.

Built-in upload handlers were not affected by this vulnerability.

漏洞修复

• 修正了 Django 3.1 中的一个错误，当使用 test --pdb 和 --buffer 选项时，测试错误或失败时的输出被隐藏（#32560）。