CVE-2026-108147

Name of the Vulnerable Software and Affected Versions Django versions prior to 6.1.3 Django versions prior to 6.0.10 Django versions prior to 5.2.19

Description The django.http.multipartparser.MultiPartParser is subject to excessive memory consumption. This occurs when processing multipart file uploads that use base64 Content-Transfer-Encoding, as the data may be buffered entirely in memory before it is passed to upload handlers.

Recommendations Update to version 6.1.3 or newer. Update to version 6.0.10 or newer. Update to version 5.2.19 or newer.