---
title: "Notes de publication de Django 3.1.8"
version: 6.0
locale: fr
source: https://docs.djangoproject.com/fr/6.0/releases/3.1.8/
canonical: https://djangodocs.dev/fr/6.0/releases/3.1.8/
---
# Notes de publication de Django 3.1.8

*6 avril 2021*

Django 3.1.8 fixes a security issue with severity « low » and a bug in 3.1.7.

## CVE-2021-28658: Potential directory-traversal via uploaded files

`MultiPartParser` allowed directory-traversal via uploaded files with
suitably crafted file names.

Built-in upload handlers were not affected by this vulnerability.

## Correction de bogues

- Fixed a bug in Django 3.1 where the output was hidden on a test error or
  failure when using [`test --pdb`](/fr/6.0/ref/django-admin/#cmdoption-test-pdb) with the
  [`--buffer`](/fr/6.0/ref/django-admin/#cmdoption-test-buffer) option ([#32560](https://code.djangoproject.com/ticket/32560)).