---
title: "Notes de publication de Django 2.2.13"
version: 6.1
locale: fr
source: https://docs.djangoproject.com/fr/6.1/releases/2.2.13/
canonical: https://djangodocs.dev/fr/6.1/releases/2.2.13/
---
# Notes de publication de Django 2.2.13

*June 3, 2020*

Django 2.2.13 fixes two security issues and a regression in 2.2.12.

## CVE-2020-13254: Potential data leakage via malformed memcached keys

In cases where a memcached backend does not perform key validation, passing
malformed cache keys could result in a key collision, and potential data
leakage. In order to avoid this vulnerability, key validation is added to the
memcached cache backends.

## CVE-2020-13596: Possible XSS via admin `ForeignKeyRawIdWidget`

Query parameters for the admin `ForeignKeyRawIdWidget` were not properly URL
encoded, posing an XSS attack vector. `ForeignKeyRawIdWidget` now
ensures query parameters are correctly URL encoded.

## Correction de bogues

- Fixed a regression in Django 2.2.12 that affected translation loading for
  apps providing translations for territorial language variants as well as a
  generic language, where the project has different plural equations for the
  language ([#31570](https://code.djangoproject.com/ticket/31570)).
- Suivi d’une publication de sécurité de jQuery, mise à jour de la version de jQuery utilisée par le site d’administration de 3.3.1 à 3.5.1.