Django Software Foundation
An issue in `django.middleware.cache.UpdateCacheMiddleware` causes requests where the `Vary` header contains an asterisk (`'*'`) to be erroneously cached. This behavior can lead to the storage and subsequent delivery of private data to unauthorized users.