Django 1.4.3 release notes Host header poisoning Redirect poisoning Django 1.4.3 release notes December 10, 2012 Django 1.4.3 addresses two security issues present in previo...

Django 1.4.9 release notes Readdressed denial-of-service via password hashers Bugfixes Django 1.4.9 release notes October 23, 2013 Django 1.4.9 fixes a security-related bug ...

Django 1.4.12 release notes Bugfixes Django 1.4.12 release notes April 28, 2014 Django 1.4.12 fixes a regression in the 1.4.11 security release. Bugfixes Restored the abi...

Django 1.4.18 release notes WSGI header spoofing via underscore/dash conflation Mitigated possible XSS attack via user-supplied redirect URLs Denial-of-service attack against dja...

Django 1.5.7 release notes Bugfixes Django 1.5.7 release notes April 28, 2014 Django 1.5.7 fixes a regression in the 1.5.6 security release. Bugfixes Restored the ability...

Django 1.5.11 release notes Bugfixes Django 1.5.11 release notes October 22, 2014 Django 1.5.11 fixes a couple regressions in the 1.5.9 security release. Bugfixes Allowed...

Django 1.6.1 release notes Bug fixes Django 1.6.1 release notes December 12, 2013 This is Django 1.6.1, a bugfix release for Django 1.6. In addition to the bug fixes listed b...

Django 1.6.11 release notes Denial-of-service possibility with strip_tags() Mitigated possible XSS attack via user-supplied redirect URLs Django 1.6.11 release notes March 1...

Django 1.7.5 release notes Bugfixes Django 1.7.5 release notes February 25, 2015 Django 1.7.5 fixes several bugs in 1.7.4. Bugfixes Reverted a fix that prevented a migrat...

Django 1.7.8 release notes Django 1.7.8 release notes May 1, 2015 Django 1.7.8 fixes: Database introspection with SQLite 3.8.9 (released April 8, 2015) (#24637 ). A database...