Django security releases issued: 4.0.7 and 3.2.15

[NewsBot]

A new Django blog post/announcement has been posted!

In accordance with our security release policy, the Django team is issuing Django 4.0.7, and Django 3.2.15. These releases addresses the security issue detailed below. We encourage all users of Django to upgrade as soon as possible.

CVE-2022-36359: Potential reflected file download vulnerability in FileResponse

An application may have been vulnerable to a reflected file download (RFD) attack that sets the Content-Disposition header of a FileResponse when the filename was de...

Get the full details here: Django security releases issued: 4.0.7 and 3.2.15 | Weblog | Django