---
title: "Note di rilascio di Django 3.1.8"
version: 4.1
locale: it
source: https://docs.djangoproject.com/it/4.1/releases/3.1.8/
canonical: https://djangodocs.dev/it/4.1/releases/3.1.8/
---
# Note di rilascio di Django 3.1.8

*6 Aprile 2021*

Django 3.1.8 fixes a security issue with severity «low» and a bug in 3.1.7.

## CVE-2021-28658: Potential directory-traversal via uploaded files

`MultiPartParser` allowed directory-traversal via uploaded files with
suitably crafted file names.

Built-in upload handlers were not affected by this vulnerability.

## Correzioni di bug

- Fixed a bug in Django 3.1 where the output was hidden on a test error or
  failure when using [`test --pdb`](/it/4.1/ref/django-admin/#cmdoption-test-pdb) with the
  [`--buffer`](/it/4.1/ref/django-admin/#cmdoption-test-buffer) option ([#32560](https://code.djangoproject.com/ticket/32560)).