Codingjoe vulnerabilities
We track 3 vulnerabilities in Codingjoe products across 2 products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on May 12, 2026.
Latest Codingjoe vulnerabilities
- 9.9 Critical severity
django-s3file: Improper Limitation of a Pathname to a Restricted Directory
django-s3file is a lightweight file upload input for Django and Amazon S3. Prior to 7.0.2, S3FileMiddleware is vulnerable to relative path traversal attacks, where an attacker can use a modified request to escape pre-signed upload locations and have the Django
- 8.2 High severity
django-select2: Transmission of Private Resources into a New Sphere
Django-Select2 is a Django integration for Select2. Prior to version 8.4.1, instances of HeavySelect2Mixin subclasses like the ModelSelect2MultipleWidget and ModelSelect2Widget can leak secret access tokens across requests. This can allow users to access restr
- 9.8 Critical severity
django-s3file: Improper Limitation of a Pathname to a Restricted Directory
django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions prior to 5.5.1 it was possible to traverse the entire AWS S3 bucket and in most cases to access or delete files. If the `AWS_LOCATION` setting was set, traversal was limite