django/tests/utils_tests/traversal_archives/traversal_disk_win.zip at 7c08f26bf0439c1ed593b51b51ad847f7e262bc1

mirror of https://github.com/django/django.git synced 2025-07-28 15:44:20 +00:00

Mariusz Felisiak 05413afa8c Fixed CVE-2021-3281 -- Fixed potential directory-traversal via archive.extract().

Thanks Florian Apolloner, Shai Berger, and Simon Charette for reviews.

Thanks Wang Baohua for the report.

2021-02-01 09:07:36 +01:00

View raw