Django 1.4.18 release notes WSGI header spoofing via underscore/dash conflation Mitigated possible XSS attack via user-supplied redirect URLs Denial-of-service attack against dja...

Django 1.4.19 release notes Bugfixes Django 1.4.19 release notes January 27, 2015 Django 1.4.19 fixes a regression in the 1.4.18 security release. Bugfixes GZipMiddleware ...

Django 1.5.5 release notes Readdressed denial-of-service via password hashers Properly rotate CSRF token on login Bugfixes Backwards incompatible changes Django 1.5.5 releas...

Django 1.5.6 release notes Unexpected code execution using reverse() Caching of anonymous pages could reveal CSRF token MySQL typecasting Bugfixes Django 1.5.6 release note...

Django 1.5.7 release notes Bugfixes Django 1.5.7 release notes April 28, 2014 Django 1.5.7 fixes a regression in the 1.5.6 security release. Bugfixes Restored the ability t...

Django 1.6.5 release notes Issue: Caches may incorrectly be allowed to store and serve private data Issue: Malformed redirect URLs from user input not correctly validated Bugfixe...

Django 1.6.11 release notes Denial-of-service possibility with strip_tags() Mitigated possible XSS attack via user-supplied redirect URLs Django 1.6.11 release notes March 18...

Django 1.7.5 release notes Bugfixes Django 1.7.5 release notes February 25, 2015 Django 1.7.5 fixes several bugs in 1.7.4. Bugfixes Reverted a fix that prevented a migratio...

Django 1.8.3 release notes Denial-of-service possibility by filling session store Header injection possibility since validators accept newlines in input Denial-of-service possibi...

Django 1.8.8 release notes Bugfixes Django 1.8.8 release notes January 2, 2016 Django 1.8.8 fixes several bugs in 1.8.7. Python 3.2 users, please be advised that we’ve decide...