Natalia Bidart

Potential memory exhaustion in MultiPartParser via base64-encoded file upload

Password hash disclosure to "view only" admin users with custom user models

Potential log injection via unescaped geometry form values

Potential denial-of-service vulnerability via nested geometry collections

Potential denial-of-service vulnerability in HTTP header parsing

Privilege abuse in model formsets with editable primary keys

Server-side file-write and request forgery via spatial lookups

Potential denial-of-service vulnerability in check_for_language()

Potential cross-site scripting via URLField values in the admin

Potential denial-of-service vulnerability in URLField via Unicode normalization on Windows