Django 1.3.6 release notes Host header poisoning XML deserialization Formset memory exhaustion Admin history view information leakage Django 1.3.6 release notes February 19...

Django 1.4.5 release notes Django 1.4.5 release notes February 20, 2013 Django 1.4.5 corrects a packaging problem with yesterday’s 1.4.4 release . The release contained stray...

Django 1.4.7 release notes Directory traversal vulnerability in ssi template tag Django 1.4.7 release notes September 10, 2013 Django 1.4.7 fixes one security issue present ...

Django 1.4.10 release notes Python compatibility Django 1.4.10 release notes November 6, 2013 Django 1.4.10 fixes a Python-compatibility bug in the 1.4 series. Python comp...

Django 1.4.13 release notes Caches may incorrectly be allowed to store and serve private data Malformed redirect URLs from user input not correctly validated Django 1.4.13 re...

Django 1.4.17 release notes Bugfixes Django 1.4.17 release notes January 2, 2015 Django 1.4.17 fixes a regression in the 1.4.14 security release. Additionally, Django’s vend...

Django 1.5.2 release notes Mitigated possible XSS attack via user-supplied redirect URLs XSS vulnerability in django.contrib.admin Bugfixes Django 1.5.2 release notes Augu...

Django 1.5.4 release notes Denial-of-service via password hashers Corrected usage of django.contrib.auth ’s admin Bugfixes Django 1.5.4 release notes September 14, 2013 Th...

Django 1.6 release notes Python compatibility What’s new in Django 1.6 Simplified default project and app templates Improved transaction management Persistent database connectio...

Django 1.6.2 release notes Django 1.6.2 release notes February 6, 2014 This is Django 1.6.2, a bugfix release for Django 1.6. Django 1.6.2 fixes several bugs in 1.6.1: Preve...