Blog Info | The Django weblog |
---|---|
Blog website | Link |
Jan. 16, 2025 » The Django weblog » [Archived Version]
Django 5.2 alpha 1 is now available. It represents the first stage in the 5.2 release cycle and is an opportunity for you to try out the changes coming in Django 5.2. Django 5.2 brings a composite of new features which you can read about in the in-development 5.2 release notes. This alpha milestone marks the feature freeze. The current release schedule calls for a beta release in about a month and a release candidate about a month from then. We'll only be able to keep this schedule if we get ea…
Read MoreDec. 4, 2024 » The Django weblog » [Archived Version]
In accordance with our security release policy, the Django team is issuing releases for Django 5.1.4, Django 5.0.10, and Django 4.2.17. These releases address the security issues detailed below. We encourage all users of Django to upgrade as soon as possible. CVE-2024-53907: Potential denial-of-service in django.utils.html.strip_tags() The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of neste…
Read MoreAug. 6, 2024 » The Django weblog » [Archived Version]
In accordance with our security release policy, the Django team is issuing releases for Django 5.0.8 and Django 4.2.15. These releases address the security issues detailed below. We encourage all users of Django to upgrade as soon as possible. CVE-2024-41989: Memory exhaustion in django.utils.numberformat.floatformat() The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent. Thanks …
Read MoreOct. 19, 2023 » The Django weblog » [Archived Version]
We are thrilled to announce that Django has a mentorship program, and that we're open for applicants for our next cohort! Djangonaut Space is an organization working to onboard and develop open source code contributors to Django and beyond. People sustain the framework and its ecosystem. By inviting more people to participate in this community, and giving them the resources and support to succeed, we aim to develop the future leaders of Django. Our journey began with our pilot “Djangonaut Space…
Read More