Django 1.6.10 release notes WSGI header spoofing via underscore/dash conflation Mitigated possible XSS attack via user-supplied redirect URLs Denial-of-service attack against dja...

Django 1.7 release notes Python compatibility What’s new in Django 1.7 Schema migrations App-loading refactor New method on Field subclasses Calling custom QuerySet methods fr...

Django 1.7.3 release notes WSGI header spoofing via underscore/dash conflation Mitigated possible XSS attack via user-supplied redirect URLs Denial-of-service attack against djan...

Django 1.7.10 release notes Denial-of-service possibility in logout() view by filling session store Django 1.7.10 release notes August 18, 2015 Django 1.7.10 fixes a security...

Django 1.8.6 release notes Bugfixes Django 1.8.6 release notes November 4, 2015 Django 1.8.6 adds official support for Python 3.5 and fixes several bugs in 1.8.5. Bugfixes ...

Django 1.8.10 release notes CVE-2016-2512: Malicious redirect and possible XSS attack via user-supplied redirect URLs containing basic auth CVE-2016-2513: User enumeration through...

Django 1.8.12 release notes Bugfixes Django 1.8.12 release notes April 1, 2016 Django 1.8.12 fixes several bugs in 1.8.11. Bugfixes Made MultiPartParser ignore filenames t...

Django 1.8.13 release notes Bugfixes Django 1.8.13 release notes May 2, 2016 Django 1.8.13 fixes several bugs in 1.8.12. Bugfixes Fixed TimeField microseconds round-trippi...

Django 1.8.16 release notes User with hardcoded password created when running tests on Oracle DNS rebinding vulnerability when DEBUG=True Django 1.8.16 release notes November...

Django 1.9.9 release notes Bugfixes Django 1.9.9 release notes August 1, 2016 Django 1.9.9 fixes several bugs in 1.9.8. Bugfixes Fixed invalid HTML in template postmortem o...