Get real-time updates on Telegram
ghsa:GHSA-6R3C-8XF3-GGRR: django-sendfile2 < 0.6.0
Directory traversal outside of SENDFILE_ROOT in django-sendfile2. Affected range: < 0.6.0. Fixed version: 0.6.0.
Affected technology
django-sendfile2 · < 0.6.0
Vendor not specified by the source
Component: Not specified by the source
What an attacker can do
The source does not specify what an attacker can achieve.
- Product
- django-sendfile2
- KEV
- no
Provenance
- GitHub Advisory Database · Source record · observed 2026-10-24 16:17:22.316973+00:00 UTC
Stable permalink: https://cybercodered.org/item/adv-ghsa-ghsa-6r3c-8xf3-ggrr.html