Django 1.7.3 release notes WSGI header spoofing via underscore/dash conflation Mitigated possible XSS attack via user-supplied redirect URLs Denial-of-service attack against djan...

Django 1.7.5 release notes Bugfixes Django 1.7.5 release notes February 25, 2015 Django 1.7.5 fixes several bugs in 1.7.4. Bugfixes Reverted a fix that prevented a migratio...

Django 1.7.8 release notes Django 1.7.8 release notes May 1, 2015 Django 1.7.8 fixes: Database introspection with SQLite 3.8.9 (released April 8, 2015) (#24637 ). A database ...

Django 1.8.3 release notes Denial-of-service possibility by filling session store Header injection possibility since validators accept newlines in input Denial-of-service possibi...

Django 1.8.11 release notes Django 1.8.11 release notes March 5, 2016 Django 1.8.11 fixes a regression on Python 2 in the 1.8.10 security release where utils.http.is_safe_url()...

Django 1.8.16 release notes User with hardcoded password created when running tests on Oracle DNS rebinding vulnerability when DEBUG=True Django 1.8.16 release notes November...

Django 1.9.2 release notes Security issue: User with “change” but not “add” permission can create objects for ModelAdmin ’s with save_as=True Backwards incompatible change: .py-t...

Django 1.9.4 release notes Django 1.9.4 release notes March 5, 2016 Django 1.9.4 fixes a regression on Python 2 in the 1.9.3 security release where utils.http.is_safe_url() cr...

Django 1.9.7 release notes Bugfixes Django 1.9.7 release notes June 4, 2016 Django 1.9.7 fixes several bugs in 1.9.6. Bugfixes Removed the need for the request context pro...

Django 1.9.9 release notes Bugfixes Django 1.9.9 release notes August 1, 2016 Django 1.9.9 fixes several bugs in 1.9.8. Bugfixes Fixed invalid HTML in template postmortem o...