Django 1.4.11 release notes Unexpected code execution using reverse() Caching of anonymous pages could reveal CSRF token MySQL typecasting Django 1.4.11 release notes April...

Django 1.4.14 release notes reverse() could generate URLs pointing to other hosts File upload denial-of-service RemoteUserMiddleware session hijacking Data leakage via query s...

Django 1.4.21 release notes Denial-of-service possibility by filling session store Header injection possibility since validators accept newlines in input Django 1.4.21 releas...

Django 1.5.3 release notes Directory traversal vulnerability in ssi template tag Mitigating a remote-code execution vulnerability in django.contrib.sessions Django 1.5.3 r...

Django 1.5.9 release notes reverse() could generate URLs pointing to other hosts File upload denial-of-service RemoteUserMiddleware session hijacking Data leakage via query st...

Django 1.6.6 release notes reverse() could generate URLs pointing to other hosts File upload denial-of-service RemoteUserMiddleware session hijacking Data leakage via query st...

Django 1.6.9 release notes Bugfixes Django 1.6.9 release notes January 2, 2015 Django 1.6.9 fixes a regression in the 1.6.6 security release. Additionally, Django’s vendored...

Django 1.7.1 release notes Bugfixes Django 1.7.1 release notes October 22, 2014 Django 1.7.1 fixes several bugs in 1.7. Bugfixes Allowed related many-to-many fields to be...

Django 1.7.3 release notes WSGI header spoofing via underscore/dash conflation Mitigated possible XSS attack via user-supplied redirect URLs Denial-of-service attack against djan...

Django 1.7.4 release notes Bugfixes Django 1.7.4 release notes January 27, 2015 Django 1.7.4 fixes several bugs in 1.7.3. Bugfixes Fixed a migration crash when unapplying...