django-planet

Sarah Boyce

Blog Info The Django weblog
Blog website Link

Django 5.2 alpha 1 released

Jan. 16, 2025 » The Django weblog » [Archived Version]

Django 5.2 alpha 1 is now available. It represents the first stage in the 5.2 release cycle and is an opportunity for you to try out the changes coming in Django 5.2. Django 5.2 brings a composite of new features which you can read about in the in-development 5.2 release notes. This alpha milestone marks the feature freeze. The current release schedule calls for a beta release in about a month and a release candidate about a month from then. We'll only be able to keep this schedule if we get ea…

Read More

Django security releases issued: 5.1.4, 5.0.10, and 4.2.17

Dec. 4, 2024 » The Django weblog » [Archived Version]

In accordance with our security release policy, the Django team is issuing releases for Django 5.1.4, Django 5.0.10, and Django 4.2.17. These releases address the security issues detailed below. We encourage all users of Django to upgrade as soon as possible. CVE-2024-53907: Potential denial-of-service in django.utils.html.strip_tags() The strip_tags() method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of neste…

Read More

Django security releases issued: 5.0.8 and 4.2.15

Aug. 6, 2024 » The Django weblog » [Archived Version]

In accordance with our security release policy, the Django team is issuing releases for Django 5.0.8 and Django 4.2.15. These releases address the security issues detailed below. We encourage all users of Django to upgrade as soon as possible. CVE-2024-41989: Memory exhaustion in django.utils.numberformat.floatformat() The floatformat template filter is subject to significant memory consumption when given a string representation of a number in scientific notation with a large exponent. Thanks …

Read More

Djangonaut Space now accepting applications for our next contributor mentorship cohort

Oct. 19, 2023 » The Django weblog » [Archived Version]

We are thrilled to announce that Django has a mentorship program, and that we're open for applicants for our next cohort! Djangonaut Space is an organization working to onboard and develop open source code contributors to Django and beyond. People sustain the framework and its ecosystem. By inviting more people to participate in this community, and giving them the resources and support to succeed, we aim to develop the future leaders of Django. Our journey began with our pilot “Djangonaut Space…

Read More