CVE-2024-39330: Django Path Traversal vulnerability

The vulnerability arises because the original save() method in Storage did not validate the filename before and after calling get_available_name(). Subclasses overriding generate_filename() (used by get_available_name()) without replicating the parent's validation could bypass checks. The patch added explicit validate_file_name() calls in save() to enforce validation regardless of subclass implementations. Thus, the unpatched save() method is the vulnerable function when used with such subclasses.