django-planet

Sarah Boyce

Blog Info The Django weblog
Blog website Link

Django security releases issued: 5.0.8 and 4.2.15

Aug. 6, 2024 » The Django weblog » [Archived Version]

In accordance with our security release policy, the Django team is issuing releases for Django 5.0.8 and Django 4.2.15. These releases address the security issues detailed below. We encourage all users of Django to upgrade as soon as possible. CVE-2024-41989: Memory exhaustion in django.utils.numberformat.floatformat() The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent. Thanks …

Read More

Djangonaut Space now accepting applications for our next contributor mentorship cohort

Oct. 19, 2023 » The Django weblog » [Archived Version]

We are thrilled to announce that Django has a mentorship program, and that we're open for applicants for our next cohort! Djangonaut Space is an organization working to onboard and develop open source code contributors to Django and beyond. People sustain the framework and its ecosystem. By inviting more people to participate in this community, and giving them the resources and support to succeed, we aim to develop the future leaders of Django. Our journey began with our pilot “Djangonaut Space…

Read More