Jacob Walls

Potential memory exhaustion in MultiPartParser via base64-encoded file upload

Server-side request forgery via crs member of GeoJSON geometries

Potential exposure of private data via empty and missing Vary headers

Password hash disclosure to "view only" admin users with custom user models

Server-side request forgery via SpatialReference string input

Potential log injection via unescaped geometry form values

Potential denial-of-service vulnerability via nested geometry collections

Potential denial-of-service vulnerability in HTTP header parsing

Privilege abuse in model formsets with editable primary keys

Server-side file-write and request forgery via spatial lookups