django-sendfile2 vulnerabilities
CVEs whose affected-version data names the django-sendfile2 package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
GHSA-pcjh-6r5h-r92rHighdjango-sendfile2 before 0.7.0 contains reflected file download vulnerability
django-sendfile2 before 0.7.0 contains reflected file download vulnerability
▾ Twilightdjango-sendfile2 · django-sendfile2via GHSA
GHSA-6r3c-8xf3-ggrrMediumDirectory traversal outside of SENDFILE_ROOT in django-sendfile2
Directory traversal outside of SENDFILE_ROOT in django-sendfile2
▾ Sunlitdjango-sendfile2 · django-sendfile2via GHSA