Tag pair

Python + Security

1 article that carry both tags.

Articles

3 Nov 2026Django 6.1.3: a base64 upload can exhaust memory before any check
FILE_UPLOAD_MAX_MEMORY_SIZE does not protect base64 uploads. What CVE-2026-108147 fixes, and how to cap the decoded size yourself.