Django 1.3.4 release notes Host header poisoning Django 1.3.4 release notes October 17, 2012 This is the fourth release in the Django 1.3 series. Host header poisoning Som...

Django 1.3.5 release notes Host header poisoning Redirect poisoning Django 1.3.5 release notes December 10, 2012 Django 1.3.5 addresses two security issues present in previo...

Django 1.4.11 release notes Unexpected code execution using reverse() Caching of anonymous pages could reveal CSRF token MySQL typecasting Django 1.4.11 release notes April...

Django 1.6.4 release notes 漏洞修复 Django 1.6.4 release notes April 28, 2014 Django 1.6.4 fixes several bugs in 1.6.3. 漏洞修复 Added backwards compatibility support for the dja...

Django 1.6.5 release notes Issue: Caches may incorrectly be allowed to store and serve private data Issue: Malformed redirect URLs from user input not correctly validated 漏洞修复 ...

Django 1.6.6 release notes reverse() could generate URLs pointing to other hosts File upload denial-of-service RemoteUserMiddleware session hijacking Data leakage via query st...

Django 1.6.8 release notes 漏洞修复 Django 1.6.8 release notes October 22, 2014 Django 1.6.8 fixes a couple regressions in the 1.6.6 security release. 漏洞修复 Allowed related ma...

Django 1.7.7 release notes Denial-of-service possibility with strip_tags() Mitigated possible XSS attack via user-supplied redirect URLs 漏洞修复 Django 1.7.7 release notes Mar...

Django 1.8 release notes Python 兼容性 What’s new in Django 1.8 Model._meta API Multiple template engines Security enhancements New PostgreSQL specific functionality New data ty...

Django 1.8.2 release notes Fixed session flushing in the cached_db backend 漏洞修复 Django 1.8.2 release notes May 20, 2015 Django 1.8.2 fixes a security issue and several bugs...