Natalia Bidart

Potential denial-of-service vulnerability via nested geometry collections

Potential denial-of-service vulnerability in HTTP header parsing

Privilege abuse in model formsets with editable primary keys

Server-side file-write and request forgery via spatial lookups

Potential denial-of-service vulnerability in check_for_language()

Potential cross-site scripting via URLField values in the admin

Potential denial-of-service vulnerability in URLField via Unicode normalization on Windows

Potential exposure of private data via cached Set-Cookie response

Header injection possibility since DomainNameValidator accepted newlines in input

Potential exposure of private data via whitespace padding in Vary header