Django 1.7.1 release notes Bugfixes Django 1.7.1 release notes October 22, 2014 Django 1.7.1 fixes several bugs in 1.7. Bugfixes Allowed related many-to-many fields to be r...

Django 1.7.3 release notes WSGI header spoofing via underscore/dash conflation Mitigated possible XSS attack via user-supplied redirect URLs Denial-of-service attack against djan...

Django 1.7.5 release notes Bugfixes Django 1.7.5 release notes February 25, 2015 Django 1.7.5 fixes several bugs in 1.7.4. Bugfixes Reverted a fix that prevented a migratio...

Django 1.7.8 release notes Django 1.7.8 release notes May 1, 2015 Django 1.7.8 fixes: Database introspection with SQLite 3.8.9 (released April 8, 2015) (#24637 ). A database ...

Django 1.8.3 release notes Denial-of-service possibility by filling session store Header injection possibility since validators accept newlines in input Denial-of-service possibi...

Django 1.8.11 release notes Django 1.8.11 release notes March 5, 2016 Django 1.8.11 fixes a regression on Python 2 in the 1.8.10 security release where utils.http.is_safe_url()...

Django 1.8.16 release notes User with hardcoded password created when running tests on Oracle DNS rebinding vulnerability when DEBUG=True Django 1.8.16 release notes November...

Django 1.9.2 release notes Security issue: User with “change” but not “add” permission can create objects for ModelAdmin ’s with save_as=True Backwards incompatible change: .py-t...

Django 1.9.4 release notes Django 1.9.4 release notes March 5, 2016 Django 1.9.4 fixes a regression on Python 2 in the 1.9.3 security release where utils.http.is_safe_url() cr...

Django 1.9.7 release notes Bugfixes Django 1.9.7 release notes June 4, 2016 Django 1.9.7 fixes several bugs in 1.9.6. Bugfixes Removed the need for the request context pro...