---
title: "Cartlann saincheisteanna slándála"
version: 6.1
locale: ga
source: https://docs.djangoproject.com/ga/6.1/releases/security/
canonical: https://djangodocs.dev/ga/6.1/releases/security/
---
# Cartlann saincheisteanna slándála

Tá foireann forbartha Django tiomanta go láidir do thuairisciú agus nochtadh freagrach ar shaincheisteanna a bhaineann le slándáil, mar a leagtar amach in:doc: Polasaithe slándála \</internals/security\> Django'.

Mar chuid den tiomantas sin, coinnímid an liosta stairiúil seo a leanas de shaincheisteanna a shocraíodh agus a nochtadh. \< [https://en.wikipedia.org/wiki/Common\_Vulnerabilities\_and\_Exposures](https://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures)\>I gcás gach eisiúint, cuimsíonn an liosta thíos an dáta, cur síos gairid, an  más infheidhme, liosta de na leaganacha atá buailte, nasc leis an nochtadh iomlán agus naisc chuig an bpaiste/paistí cuí.

Baineann roinnt rabhadh tábhachtacha leis an bhfaisnéis seo:

- Ní chuimsíonn liostaí de na leaganacha atá buailte ach na leaganacha sin de Django a raibh eisiúintí cobhsaí le tacaíocht slándála ag am na nochtadh. Ciallaíonn sé seo go bhféadfadh go mbeadh tionchar ag leaganacha níos sine (a raibh a dtacaíocht slándála in éag) agus ar leaganacha a bhí i stáit réamh-scaoilte (alpha/beta/RC) tráth na nochtadh, ach nach bhfuil liostaithe orthu.
- D'eisigh tionscadal Django comhairleanna slándála uaireanta, ag cur in iúl fadhbanna slándála féideartha a d'fhéadfadh teacht chun cinn ó chumraíocht mhíchuí nó ó shaincheisteanna eile lasmuigh de Tá CVEanna faighte ag cuid de na comhairleachtaí seo; nuair is amhlaidh, tá siad liostaithe anseo, ach toisc nach bhfuil aon phaistí nó eisiúintí a ghabhann leo, ní liostófar ach an tuairisc, an nochtadh agus an CVE.

## Saincheisteanna faoi phróiseas slándála Django

Láimhseáladh gach saincheist slándála faoi leaganacha de phróiseas slándála Django. Tá siad seo liostaithe thíos.

### August 4, 2026 - [**CVE 2026-15307**](https://www.cve.org/CVERecord?id=CVE-2026-15307)

Server-side file-write and request forgery via spatial lookups.
[Full description](https://www.djangoproject.com/weblog/2026/aug/04/security-releases/)

- Django 6.1 [(patch)](https://github.com/django/django/commit/39b3e2d0c743a338def6c473086ebc06865e86b6)
- Django 6.0 [(patch)](https://github.com/django/django/commit/208f80cb682868b584ed0a78f23e4ba6304212aa)
- Django 5.2 [(patch)](https://github.com/django/django/commit/115ffd0463a765ab1cc93de18e94b5459b8a300e)

### August 4, 2026 - [**CVE 2026-15337**](https://www.cve.org/CVERecord?id=CVE-2026-15337)

Potential denial-of-service vulnerability in `check_for_language()`.
[Full description](https://www.djangoproject.com/weblog/2026/aug/04/security-releases/)

- Django 6.1 [(patch)](https://github.com/django/django/commit/5b3523d29be25948e1dd90b3863a002f00fc865f)
- Django 6.0 [(patch)](https://github.com/django/django/commit/224dbc832586ad5cfb0237c2ff30d14baeaddc6f)
- Django 5.2 [(patch)](https://github.com/django/django/commit/c72a5dbb64d0777f3f471f1be94e8b2ca91e0959)

### August 4, 2026 - [**CVE 2026-15830**](https://www.cve.org/CVERecord?id=CVE-2026-15830)

Potential denial-of-service vulnerability via nested geometry collections.
[Full description](https://www.djangoproject.com/weblog/2026/aug/04/security-releases/)

- Django 6.1 [(patch)](https://github.com/django/django/commit/9e4a3f186b6b07b483bfd9195ea06734663fcd06)
- Django 6.0 [(patch)](https://github.com/django/django/commit/6af5da31775417c610dbf9c3f1b5b8333d42daf6)
- Django 5.2 [(patch)](https://github.com/django/django/commit/ba80833fa656dd09660b97c4429331067db1b080)

### August 4, 2026 - [**CVE 2026-15920**](https://www.cve.org/CVERecord?id=CVE-2026-15920)

Potential cross-site scripting via `URLField` values in the admin.
[Full description](https://www.djangoproject.com/weblog/2026/aug/04/security-releases/)

- Django 6.1 [(patch)](https://github.com/django/django/commit/5a260d309a4c8010c2ebda24eb758a5d95e2508a)
- Django 6.0 [(patch)](https://github.com/django/django/commit/13debb622a32720bda1bccda7622fd14fbf3931b)
- Django 5.2 [(patch)](https://github.com/django/django/commit/b9adb81339cc418f8f56b1050cca6dfec3ab6349)

### July 7, 2026 - [**CVE 2026-48588**](https://www.cve.org/CVERecord?id=CVE-2026-48588)

Potential exposure of private data via cached `Set-Cookie` response.
[Full description](https://www.djangoproject.com/weblog/2026/jul/07/security-releases/)

- Django 6.1 [(patch)](https://github.com/django/django/commit/c2a936ab7d6048acfc341dd61e6094c2dc84782f)
- Django 6.0 [(patch)](https://github.com/django/django/commit/64f9a2b2283fde3ec69fb0dfe441cf0f6f411ba3)
- Django 5.2 [(patch)](https://github.com/django/django/commit/721685aa7799cc9327bd202cd1f70bd012ca95a7)

### July 7, 2026 - [**CVE 2026-53877**](https://www.cve.org/CVERecord?id=CVE-2026-53877)

Heap buffer over-read in `GDALRaster`.
[Full description](https://www.djangoproject.com/weblog/2026/jul/07/security-releases/)

- Django 6.1 [(patch)](https://github.com/django/django/commit/a46b417d9e441379e7f86933ec1b2fb05f63d492)
- Django 6.0 [(patch)](https://github.com/django/django/commit/38dfbd27d7d4f4e6eaa087d7a90f2613fbf55b3a)
- Django 5.2 [(patch)](https://github.com/django/django/commit/6c66eb8cec52b303af85c2c6e4dd00aa37654dbc)

### July 7, 2026 - [**CVE 2026-53878**](https://www.cve.org/CVERecord?id=CVE-2026-53878)

Header injection possibility since `DomainNameValidator` accepted newlines in
input.
[Full description](https://www.djangoproject.com/weblog/2026/jul/07/security-releases/)

- Django 6.1 [(patch)](https://github.com/django/django/commit/fe3e8a0de7fad7897fa4917013d8abd507e4d756)
- Django 6.0 [(patch)](https://github.com/django/django/commit/a5de13f1491f1dbf2bb0ad9b91570524ebbc8acd)
- Django 5.2 [(patch)](https://github.com/django/django/commit/d5d60ed0323cddaa0ce0237a26a3d49ac21ee05e)

### June 3, 2026 - [**CVE 2026-6873**](https://www.cve.org/CVERecord?id=CVE-2026-6873)

Signed cookie salt namespace collision in
`django.http.HttpRequest.get_signed_cookie`.
[Full description](https://www.djangoproject.com/weblog/2026/jun/03/security-releases/)

- Django 6.1 [(patch)](https://github.com/django/django/commit/42bdfd74ff85eb9ddf8fd444e2359afd9add59c8)
- Django 6.0 [(patch)](https://github.com/django/django/commit/c807d9c398022d23cb27518fa6ecaf343efb30cf)
- Django 5.2 [(patch)](https://github.com/django/django/commit/594360cbf58be7f56eb6da96d58644297c99ef85)

### June 3, 2026 - [**CVE 2026-7666**](https://www.cve.org/CVERecord?id=CVE-2026-7666)

Potential unencrypted email transmission via `STARTTLS` in the SMTP backend.
[Full description](https://www.djangoproject.com/weblog/2026/jun/03/security-releases/)

- Django 6.1 [(patch)](https://github.com/django/django/commit/afd82a544910dc79941a44af078bbc59e3e18f1c)
- Django 6.0 [(patch)](https://github.com/django/django/commit/625a670c467aa3118c0f8ae1e0df14dbebb3bf68)
- Django 5.2 [(patch)](https://github.com/django/django/commit/4e47d2b800435bcbfd1301ef3250b9c7fb8fa670)

### June 3, 2026 - [**CVE 2026-8404**](https://www.cve.org/CVERecord?id=CVE-2026-8404)

Potential exposure of private data via case-sensitive `Cache-Control`
directives in `UpdateCacheMiddleware`.
[Full description](https://www.djangoproject.com/weblog/2026/jun/03/security-releases/)

- Django 6.1 [(patch)](https://github.com/django/django/commit/130467c8b4d05a69b885363aa7d47386e4f5d6a9)
- Django 6.0 [(patch)](https://github.com/django/django/commit/b4330259ffbe1a031ed14daab1f35697460f10f2)
- Django 5.2 [(patch)](https://github.com/django/django/commit/366d9ae6e8d1469c04e9ebdc1bcd098fc14a3b1e)

### June 3, 2026 - [**CVE 2026-35193**](https://www.cve.org/CVERecord?id=CVE-2026-35193)

Potential exposure of private data via missing `Vary: Authorization` in
`UpdateCacheMiddleware`.
[Full description](https://www.djangoproject.com/weblog/2026/jun/03/security-releases/)

- Django 6.1 [(patch)](https://github.com/django/django/commit/b7b23f4697850e232486d787df3459f19bd16dba)
- Django 6.0 [(patch)](https://github.com/django/django/commit/664652f1a2dd80d8a4cd491b4313cad915ae6669)
- Django 5.2 [(patch)](https://github.com/django/django/commit/050a3dc276f9142067260e990e4d8d42d5e32863)

### June 3, 2026 - [**CVE 2026-48587**](https://www.cve.org/CVERecord?id=CVE-2026-48587)

Potential exposure of private data via whitespace padding in `Vary` header.
[Full description](https://www.djangoproject.com/weblog/2026/jun/03/security-releases/)

- Django 6.1 [(patch)](https://github.com/django/django/commit/e06958dbfff789d6a72efb1d38c65b4b22b6690e)
- Django 6.0 [(patch)](https://github.com/django/django/commit/1721035a72624aad7b38dd19b14013efd94b24b8)
- Django 5.2 [(patch)](https://github.com/django/django/commit/9b62b0af71a14c657d19d95371630ba839e83d9a)

### May 5, 2026 - [**CVE 2026-5766**](https://www.cve.org/CVERecord?id=CVE-2026-5766)

Potential denial-of-service vulnerability in ASGI requests via file upload
limit bypass.
[Full description](https://www.djangoproject.com/weblog/2026/may/05/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/ad8f9e19e0897ea45ded7c046ff28daf6f773e92)
- Django 5.2 [(patch)](https://github.com/django/django/commit/2ec27eda3ba6c14f0856e6e3eb1df07c41fd95e6)

### May 5, 2026 - [**CVE 2026-35192**](https://www.cve.org/CVERecord?id=CVE-2026-35192)

Session fixation via public cached pages and `SESSION_SAVE_EVERY_REQUEST`.
[Full description](https://www.djangoproject.com/weblog/2026/may/05/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/1b0184aa657bc3f5859aeb0206e7c1e94e48b103)
- Django 5.2 [(patch)](https://github.com/django/django/commit/47cf968c125e3fab317e10fe150ec479e745f995)

### May 5, 2026 - [**CVE 2026-6907**](https://www.cve.org/CVERecord?id=CVE-2026-6907)

Potential exposure of private data due to incorrect handling of `Vary: *` in
`UpdateCacheMiddleware`.
[Full description](https://www.djangoproject.com/weblog/2026/may/05/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/44ad76efcbe3c4ca0f08bb9dabe916f6374596c9)
- Django 5.2 [(patch)](https://github.com/django/django/commit/2115d4eaee15107f5cd290d7cfcc5ffe3ad43661)

### April 7, 2026 - [**CVE 2026-3902**](https://www.cve.org/CVERecord?id=CVE-2026-3902)

ASGI header spoofing via underscore/hyphen conflation.
[Full description](https://www.djangoproject.com/weblog/2026/apr/07/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/a623c3982857e80324448f85c7faf9a6710330ef)
- Django 5.2 [(patch)](https://github.com/django/django/commit/1cc2a7612f97c109b92415fc11ba9bd0501852e0)
- Django 4.2 [(patch)](https://github.com/django/django/commit/4412731aa64d62a6dd7edae79e0c15b72666d7ca)

### April 7, 2026 - [**CVE 2026-4277**](https://www.cve.org/CVERecord?id=CVE-2026-4277)

Privilege abuse in `GenericInlineModelAdmin`.
[Full description](https://www.djangoproject.com/weblog/2026/apr/07/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/08a752c1cd8f378b4c64d96c319da23726df6ed3)
- Django 5.2 [(patch)](https://github.com/django/django/commit/60ffa957c427e10a2eb0fc80d1674a8a8ccc30b0)
- Django 4.2 [(patch)](https://github.com/django/django/commit/051f3909e820360bbe84a21350e82f4961e3d917)

### April 7, 2026 - [**CVE 2026-4292**](https://www.cve.org/CVERecord?id=CVE-2026-4292)

Privilege abuse in `ModelAdmin.list_editable`.
[Full description](https://www.djangoproject.com/weblog/2026/apr/07/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/428c48f358c5a0ed5ca2834fb721d615eb2b0e11)
- Django 5.2 [(patch)](https://github.com/django/django/commit/397c22048244db2cd4bb78f570e6c72a3967bf36)
- Django 4.2 [(patch)](https://github.com/django/django/commit/abfe1a1c57a57cfaf6dd4a0571c029401a0fe743)

### April 7, 2026 - [**CVE 2026-33033**](https://www.cve.org/CVERecord?id=CVE-2026-33033)

Potential denial-of-service vulnerability in `MultiPartParser` via
base64-encoded file upload.
[Full description](https://www.djangoproject.com/weblog/2026/apr/07/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/0910af60468216c856dfbcac1177372c225deb76)
- Django 5.2 [(patch)](https://github.com/django/django/commit/0b467893bdde69a2d23034338e76021a1e4f4322)
- Django 4.2 [(patch)](https://github.com/django/django/commit/f13c20f81b56108ac477213fa5ada2524b5e5c98)

### April 7, 2026 - [**CVE 2026-33034**](https://www.cve.org/CVERecord?id=CVE-2026-33034)

Potential denial-of-service vulnerability in ASGI requests via memory upload
limit bypass.
[Full description](https://www.djangoproject.com/weblog/2026/apr/07/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/393dbc53e848876fdba92fbf02e10ee6a6eace6b)
- Django 5.2 [(patch)](https://github.com/django/django/commit/49e1e2b548999a35a025f9682598946bda9e9921)
- Django 4.2 [(patch)](https://github.com/django/django/commit/ed4dfda62718a0bb644b80ac8b1d3099861f2295)

### March 3, 2026 - [**CVE 2026-25673**](https://www.cve.org/CVERecord?id=CVE-2026-25673)

Potential denial-of-service vulnerability in `URLField` via Unicode
normalization on Windows.
[Full description](https://www.djangoproject.com/weblog/2026/mar/03/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/b1444d9acf43db9de96e0da2b4737ad56af0eb76)
- Django 5.2 [(patch)](https://github.com/django/django/commit/4d3c184686626d224d9a87451410ecf802b41f7c)
- Django 4.2 [(patch)](https://github.com/django/django/commit/b3e8ec8cc310489fe80174b14b11edb970d682ea)

### March 3, 2026 - [**CVE 2026-25674**](https://www.cve.org/CVERecord?id=CVE-2026-25674)

Potential incorrect permissions on newly created file system objects.
[Full description](https://www.djangoproject.com/weblog/2026/mar/03/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/264d5c70ef3281a8869cb2ad45a3a52d5adbe790)
- Django 5.2 [(patch)](https://github.com/django/django/commit/b07ed2a1e445efde54fc64cb8c37e0f4f7fe53e5)
- Django 4.2 [(patch)](https://github.com/django/django/commit/54b50bf7d6dcbf02d4c01f853627cc9299d4934d)

### February 3, 2026 - [**CVE 2025-13473**](https://www.cve.org/CVERecord?id=CVE-2025-13473)

Username enumeration through timing difference in mod\_wsgi authentication
handler.
[Full description](https://www.djangoproject.com/weblog/2026/feb/03/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/d72cc3be3be0bbebdcaea5a8c8106b4d6f2a32bd)
- Django 5.2 [(patch)](https://github.com/django/django/commit/184e38ab0a061c365f5775676a074796d8abd02f)
- Django 4.2 [(patch)](https://github.com/django/django/commit/6dc23508f3395e1254c315084c7334ef81c4c09a)

### February 3, 2026 - [**CVE 2025-14550**](https://www.cve.org/CVERecord?id=CVE-2025-14550)

Potential denial-of-service vulnerability via repeated headers when using ASGI.
[Full description](https://www.djangoproject.com/weblog/2026/feb/03/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/972dbdd4f7f69e9c405e6fe12a1b90e4713c1611)
- Django 5.2 [(patch)](https://github.com/django/django/commit/1ba90069c12836db46981bdf75b0e661db5849ce)
- Django 4.2 [(patch)](https://github.com/django/django/commit/f578acc8c54530fffabd52d2db654c8669b011af)

### February 3, 2026 - [**CVE 2026-1207**](https://www.cve.org/CVERecord?id=CVE-2026-1207)

Potential SQL injection via raster lookups on PostGIS.
[Full description](https://www.djangoproject.com/weblog/2026/feb/03/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/8f77e7301174834573614ae90e1826fdf27f8a24)
- Django 5.2 [(patch)](https://github.com/django/django/commit/17a1d64a58ef24c0c3b78d66d86f5415075f18f0)
- Django 4.2 [(patch)](https://github.com/django/django/commit/a14363102d98fa29b8cced578eb3a0fadaa5bcb7)

### February 3, 2026 - [**CVE 2026-1285**](https://www.cve.org/CVERecord?id=CVE-2026-1285)

Potential denial-of-service vulnerability in `django.utils.text.Truncator`
HTML methods.
[Full description](https://www.djangoproject.com/weblog/2026/feb/03/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/4b86ba51e486530db982341a23e53c7a1e1e6e71)
- Django 5.2 [(patch)](https://github.com/django/django/commit/9f2ada875bbee62ac46032e38ddb22755d67ae5a)
- Django 4.2 [(patch)](https://github.com/django/django/commit/b40cfc6052ced26dcd8166a58ea6f841d0d2cac8)

### February 3, 2026 - [**CVE 2026-1287**](https://www.cve.org/CVERecord?id=CVE-2026-1287)

Potential SQL injection in column aliases via control characters.
[Full description](https://www.djangoproject.com/weblog/2026/feb/03/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/0c0f5c2178c01ada5410cd53b4b207bf7858b952)
- Django 5.2 [(patch)](https://github.com/django/django/commit/3e68ccdc11c127758745ddf0b4954990b14892bc)
- Django 4.2 [(patch)](https://github.com/django/django/commit/f75f8f3597e1ce351d5ac08b6ba7ebd9dadd9b5d)

### February 3, 2026 - [**CVE 2026-1312**](https://www.cve.org/CVERecord?id=CVE-2026-1312)

Potential SQL injection via `QuerySet.order_by` and `FilteredRelation`.
[Full description](https://www.djangoproject.com/weblog/2026/feb/03/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/15e70cb83e6f7a9a2a2f651f30b28b5cb20febeb)
- Django 5.2 [(patch)](https://github.com/django/django/commit/e863ee273c6553e9b6fa4960a17acb535851857b)
- Django 4.2 [(patch)](https://github.com/django/django/commit/90f5b10784ba5bf369caed87640e2b4394ea3314)

### December 2, 2025 - [**CVE 2025-13372**](https://www.cve.org/CVERecord?id=CVE-2025-13372)

Potential SQL injection in `FilteredRelation` column aliases on PostgreSQL.
[Full description](https://www.djangoproject.com/weblog/2025/dec/02/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/56aea00c3c5e1aacf4ed05f8ee06c2e78f02cea0)
- Django 5.2 [(patch)](https://github.com/django/django/commit/479415ce5249bcdebeb6570c72df2a87f45a7bbf)
- Django 5.1 [(patch)](https://github.com/django/django/commit/9c6a5bde24240382807d13bc3748d08444709355)
- Django 4.2 [(patch)](https://github.com/django/django/commit/f997037b235f6b5c9e7c4a501491ec45f3400f3d)

### December 2, 2025 - [**CVE 2025-64460**](https://www.cve.org/CVERecord?id=CVE-2025-64460)

Potential denial-of-service vulnerability in XML serializer text extraction.
[Full description](https://www.djangoproject.com/weblog/2025/dec/02/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/1dbd07a608e495a0c229edaaf84d58d8976313b5)
- Django 5.2 [(patch)](https://github.com/django/django/commit/99e7d22f55497278d0bcb2e15e72ef532e62a31d)
- Django 5.1 [(patch)](https://github.com/django/django/commit/0db9ea4669312f1f4973e09f4bca06ab9c1ec74b)
- Django 4.2 [(patch)](https://github.com/django/django/commit/4d2b8803bebcdefd2b76e9e8fc528d5fddea93f0)

### November 5, 2025 - [**CVE 2025-64458**](https://www.cve.org/CVERecord?id=CVE-2025-64458)

Potential denial-of-service vulnerability in `HttpResponseRedirect` and
`HttpResponsePermanentRedirect` on Windows. [Full description](https://www.djangoproject.com/weblog/2025/nov/05/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/6e13348436fccf8f22982921d6a3a3e65c956a9f)
- Django 5.2 [(patch)](https://github.com/django/django/commit/4f5d904b63751dea9ffc3b0e046404a7fa5881ac)
- Django 5.1 [(patch)](https://github.com/django/django/commit/3790593781d26168e7306b5b2f8ea0309de16242)
- Django 4.2 [(patch)](https://github.com/django/django/commit/770eea38d7a0e9ba9455140b5a9a9e33618226a7)

### November 5, 2025 - [**CVE 2025-64459**](https://www.cve.org/CVERecord?id=CVE-2025-64459)

Potential SQL injection via `_connector` keyword argument in `QuerySet` and
`Q` objects. [Full description](https://www.djangoproject.com/weblog/2025/nov/05/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/06dd38324ac3d60d83d9f3adabf0dcdf423d2a85)
- Django 5.2 [(patch)](https://github.com/django/django/commit/6703f364d767e949c5b0e4016433ef75063b4f9b)
- Django 5.1 [(patch)](https://github.com/django/django/commit/72d2c87431f2ae0431d65d0ec792047f078c8241)
- Django 4.2 [(patch)](https://github.com/django/django/commit/59ae82e67053d281ff4562a24bbba21299f0a7d4)

### October 1, 2025 - [**CVE 2025-59681**](https://www.cve.org/CVERecord?id=CVE-2025-59681)

Potential SQL injection in `QuerySet.annotate()`, `alias()`,
`aggregate()`, and `extra()` on MySQL and MariaDB. [Full description](https://www.djangoproject.com/weblog/2025/oct/01/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/4ceaaee7e04b416fc465e838a6ef43ca0ccffafe)
- Django 5.2 [(patch)](https://github.com/django/django/commit/52fbae0a4dbbe5faa59827f8f05694a0065cc135)
- Django 5.1 [(patch)](https://github.com/django/django/commit/01d2d770e22bffe53c7f1e611e2bbca94cb8a2e7)
- Django 4.2 [(patch)](https://github.com/django/django/commit/38d9ef8c7b5cb6ef51b933e51a20e0e0063f33d5)

### October 1, 2025 - [**CVE 2025-59682**](https://www.cve.org/CVERecord?id=CVE-2025-59682)

Potential partial directory-traversal via `archive.extract()`.
[Full description](https://www.djangoproject.com/weblog/2025/oct/01/security-releases/)

- Django 6.0 [(patch)](https://github.com/django/django/commit/af067f56c1dd467df4abd0ddd409a700da1f03ba)
- Django 5.2 [(patch)](https://github.com/django/django/commit/ed8fc39d77465eddbde1191a054ae965f6a8a584)
- Django 5.1 [(patch)](https://github.com/django/django/commit/74fa85c688a87224637155902bcd738bb9e65e11)
- Django 4.2 [(patch)](https://github.com/django/django/commit/9504bbaa392c9fe37eee9291f5b4c29eb6037619)

### September 3, 2025 - [**CVE 2025-57833**](https://www.cve.org/CVERecord?id=CVE-2025-57833)

Potential SQL injection in `FilteredRelation` column aliases.
[Full description](https://www.djangoproject.com/weblog/2025/sep/03/security-releases/)

- Django 5.2 [(patch)](https://github.com/django/django/commit/4c044fcc866ec226f612c475950b690b0139d243)
- Django 5.1 [(patch)](https://github.com/django/django/commit/102965ea93072fe3c39a30be437c683ec1106ef5)
- Django 4.2 [(patch)](https://github.com/django/django/commit/31334e6965ad136a5e369993b01721499c5d1a92)

### June 4, 2025 - [**CVE 2025-48432**](https://www.cve.org/CVERecord?id=CVE-2025-48432)

Potential log injection via unescaped request path.
[Full description](https://www.djangoproject.com/weblog/2025/jun/04/security-releases/)

- Django 5.2 [(patch)](https://github.com/django/django/commit/7456aa23dafa149e65e62f95a6550cdb241d55ad)
- Django 5.1 [(patch)](https://github.com/django/django/commit/596542ddb46cdabe011322917e1655f0d24eece2)
- Django 4.2 [(patch)](https://github.com/django/django/commit/ac03c5e7df8680c61cdb0d3bdb8be9095dba841e)

There was an additional hardening with new patch releases published on June 10,
\2025. [Full description](https://www.djangoproject.com/weblog/2025/jun/10/bugfix-releases/)

- Django 5.2.3 [(patch)](https://github.com/django/django/commit/8fcc83953c350e158a484bf1da0aa1b79b69bb07)
- Django 5.1.11 [(patch)](https://github.com/django/django/commit/31f4bd31fa16f7f5302f65b9b8b7a49b69a7c4a6)
- Django 4.2.23 [(patch)](https://github.com/django/django/commit/b597d46bb19c8567615e62029210dab16c70db7d)

### May 7, 2025 - [**CVE 2025-32873**](https://www.cve.org/CVERecord?id=CVE-2025-32873)

Denial-of-service possibility in `strip_tags()`.
[Full description](https://www.djangoproject.com/weblog/2025/may/07/security-releases/)

- Django 5.2 [(patch)](https://github.com/django/django/commit/c9731dc656e533187b021b4d81f8293d6c943a43)
- Django 5.1 [(patch)](https://github.com/django/django/commit/0b42f6a528df966729b24ecaaed67f85e5edc3dc)
- Django 4.2 [(patch)](https://github.com/django/django/commit/9cd8028f3e38dca8e51c1388f474eecbe7d6ca3c)

### April 2, 2025 - [**CVE 2025-27556**](https://www.cve.org/CVERecord?id=CVE-2025-27556)

Potential denial-of-service vulnerability in `LoginView`, `LogoutView`, and
`set_language()` on Windows. [Full description](https://www.djangoproject.com/weblog/2025/apr/02/security-releases/)

- Django 5.1 [(patch)](https://github.com/django/django/commit/edc2716d01a6fdd84b173c02031695231bcee1f8)
- Django 5.0 [(patch)](https://github.com/django/django/commit/8c6871b097b6c49d2a782c0d80d908bcbe2116f1)

### March 6, 2025 - [**CVE 2025-26699**](https://www.cve.org/CVERecord?id=CVE-2025-26699)

Potential denial-of-service in `django.utils.text.wrap()`.
[Full description](https://www.djangoproject.com/weblog/2025/mar/06/security-releases/)

- Django 5.1 [(patch)](https://github.com/django/django/commit/8dbb44d34271637099258391dfc79df33951b841)
- Django 5.0 [(patch)](https://github.com/django/django/commit/4f2765232336b8ad0afd8017d9d912ae93470017)
- Django 4.2 [(patch)](https://github.com/django/django/commit/e88f7376fe68dbf4ebaf11fad1513ce700b45860)

### January 14, 2025 - [**CVE 2024-56374**](https://www.cve.org/CVERecord?id=CVE-2024-56374)

Potential denial-of-service vulnerability in IPv6 validation.
[Full description](https://www.djangoproject.com/weblog/2025/jan/14/security-releases/)

- Django 5.1 [(patch)](https://github.com/django/django/commit/4806731e58f3e8700a3c802e77899d54ac6021fe)
- Django 5.0 [(patch)](https://github.com/django/django/commit/e8d4a2005955dcf962193600b53bf461b190b455)
- Django 4.2 [(patch)](https://github.com/django/django/commit/ad866a1ca3e7d60da888d25d27e46a8adb2ed36e)

### 4 Nollaig, 2024 -:cve: 2024-53907

Diúltú seirbhíse féideartha i django.utils.html.strip\_tags () .  \< <https://www.djangoproject.com/weblog/2024/dec/04/security-releases/>\>

- \<bbc74a7f7eb7335e913bdb4787f22e83a9be947e\>Django 5.1: compromiso: (paiste)
- \<a5a89ea28cc550c1b29b03f9e14ef3c128ec1e84\>Django 5.0: compromiso: (paiste)
- \<790eb058b0716c536a2f2e8d1c6d5079d776c22b\>Django 4.2: compromiso: (paiste)

### 4 Nollaig, 2024 -:cve: 2024-53908

Instealladh SQL féideartha i Haskey (lhs, rhs) ar Oracle.  \< <https://www.djangoproject.com/weblog/2024/dec/04/security-releases/>\>

- \<6943d61818e63e77b65d8b1ae65941e8f04bd87b\>Django 5.1: compromiso: (paiste)
- \<ff08bb6c70aa45f83a5ef3bd0b601c7c9d1a7642\>Django 5.0: compromiso: (paiste)
- \<7376bcbf508883282ffcc0f0fac5cf0ed2d6cbc5\>Django 4.2: compromiso: (paiste)

### Meán Fómhair 3, 2024 -:cve: 2024-45231

Áireamh ríomhphoist úsáideora féideartha trí stádas freagartha ar athshocrú pasfhocal.  \< <https://www.djangoproject.com/weblog/2024/sep/03/security-releases/>\>

- \<3c733c78d6f8e50296d6e248968b6516c92a53ca\>Django 5.1: compromiso: (paiste)
- \<96d84047715ea1715b4bd1594e46122b8a77b9e2\>Django 5.0: compromiso: (paiste)
- \<bf4888d317ba4506d091eeac6e8b4f1fcc731199\>Django 4.2: compromiso: (paiste)

### Meán Fómhair 3, 2024 -:cve: 2024-45230

Leochaileacht féideartha a dhiúltú seirbhíse i django.utils.html.urlize () .  \< <https://www.djangoproject.com/weblog/2024/sep/03/security-releases/>\>

- \<022ab0a75c76ab2ea31dfcc5f2cf5501e378d397\>Django 5.1: compromiso: (paiste)
- \<813de2672bd7361e9a453ab62cd6e52f96b6525b\>Django 5.0: compromiso: (paiste)
- \<d147a8ebbdf28c17cafbbe2884f0bc57e2bf82e2\>Django 4.2: compromiso: (paiste)

### 6 Lúnasa, 2024 -:cve: 2024-42005

Instealladh SQL féideartha i ```QuerySet.values () ``agus ``values_list ()```.  \< <https://www.djangoproject.com/weblog/2024/aug/06/security-releases/>\>

- \<32ebcbf2e1fe3e5ba79a6554a167efce81f7422d\>Django 5.0: compromiso: (paiste)
- \<f4af67b9b41e0f4c117a8741da3abbd1c869ab28\>Django 4.2: compromiso: (paiste)

### 6 Lúnasa, 2024 -:cve: 2024-41991

Leochaileacht féideartha a dhiúltú seirbhíse i ```django.utils.html.urlize () ``agus ``adminURLFieldWidget```.  \< <https://www.djangoproject.com/weblog/2024/aug/06/security-releases/>\>

- \<523da8771bce321023f490f70d71a9e973ddc927\>Django 5.0: compromiso: (paiste)
- \<efea1ef7e2190e3f77ca0651b5458297bc0f6a9f\>Django 4.2: compromiso: (paiste)

### 6 Lúnasa, 2024 -:cve: 2024-41990

Leochaileacht féideartha a dhiúltú seirbhíse i django.utils.html.urlize () .  \< <https://www.djangoproject.com/weblog/2024/aug/06/security-releases/>\>

- \<7b7b909579c8311c140c89b8a9431bf537febf93\>Django 5.0: compromiso: (paiste)
- \<d0a82e26a74940bf0c78204933c3bdd6a283eb88\>Django 4.2: compromiso: (paiste)

### 6 Lúnasa, 2024 -:cve: 2024-41989

Ídiú cuimhne féideartha i django.utils.numberformat.floatformat () .  \< <https://www.djangoproject.com/weblog/2024/aug/06/security-releases/>\>

- \<27900fe56f3d3cabb4aeb6ccb82f92bab29073a8\>Django 5.0: compromiso: (paiste)
- \<fc76660f589ac07e45e9cd34ccb8087aeb11904b\>Django 4.2: compromiso: (paiste)

### 9 Iúil, 2024 -:cve: 2024-39614

Diúltú seirbhíse féideartha i django.utils.translation.get\_supported\_language\_variant () .  \< <https://www.djangoproject.com/weblog/2024/jul/09/security-releases/>\>

- \<8e7a44e4bec0f11474699c3111a5e0a45afe7f49\>Django 5.0: compromiso: (paiste)
- \<17358fb35fb7217423d4c4877ccb6d1a3a40b1c3\>Django 4.2: compromiso: (paiste)

### 9 Iúil, 2024 -: cve: 2024-39330

Tarraingt stiúrthóireachta féideartha i django.core.files.storage.storage.save () .  \< <https://www.djangoproject.com/weblog/2024/jul/09/security-releases/>\>

- \<9f4f63e9ebb7bf6cb9547ee4e2526b9b96703270\>Django 5.0: compromiso: (paiste)
- \<2b00edc0151a660d1eb86da4059904a0fc4e095e\>Django 4.2: compromiso: (paiste)

### 9 Iúil, 2024 -: cve: 2024-39329

Áireamh ainm úsáideora trí dhifríocht uainiúcháin d'úsáideoirí a bhfuil pasfhocail neamhú  \< <https://www.djangoproject.com/weblog/2024/jul/09/security-releases/>\>

- \<07cefdee4a9d1fcd9a3a631cbd07c78defd1923b\>Django 5.0: compromiso: (paiste)
- \<156d3186c96e3ec2ca73b8b25dc2ef366e38df14\>Django 4.2: compromiso: (paiste)

### 9 Iúil, 2024 -: cve: 2024-38875

Diúltú seirbhíse féideartha i django.utils.html.urlize () .  \< <https://www.djangoproject.com/weblog/2024/jul/09/security-releases/>\>

- \<7285644640f085f41d60ab0c8ae4e9153f0485db\>Django 5.0: compromiso: (paiste)
- \<79f368764295df109a37192f6182fb6f361d85b5\>Django 4.2: compromiso: (paiste)

### 4 Márta, 2024 -: cve: 2024-27351

Léiriú rialta féideartha diúltú seirbhíse i Django.utils.text.truncator.words () .  \< <https://www.djangoproject.com/weblog/2024/mar/04/security-releases/>\>

- \<3394fc6132436eca89e997083bae9985fb7e761e\>Django 5.0: compromiso: (paiste)
- \<3c9a2771cc80821e041b16eb36c1c37af5349d4a\>Django 4.2: compromiso: (paiste)
- \<072963e4c4d0b3a7a8c5412bc0c7d27d1a9c3521\>Django 3.2: compromiso: (paiste)

### Feabhra 6, 2024 -:cve: 2024-24680

Diúltú seirbhíse féideartha i scagaire teimpléad intcomma\`.  \< <https://www.djangoproject.com/weblog/2024/feb/06/security-releases/>\>

- \<16a8fe18a3b81250f4fa57e3f93f0599dc4895bc\>Django 5.0: compromiso: (paiste)
- \<572ea07e84b38ea8de0551f4b4eda685d91d09d2\>Django 4.2: compromiso: (paiste)
- \<c1171ffbd570db90ca206c30f8e2b9f691243820\>Django 3.2: compromiso: (paiste)

### 1 Samhain, 2023 -:cve: 2023-46695

Diúltú féideartha leochaileacht seirbhíse i ÚsáideorainmField\` ar Windows.  \< <https://www.djangoproject.com/weblog/2023/nov/01/security-releases/>\>

- \<048a9ebb6ea468426cb4e57c71572cbbd975517f\>Django 4.2: compromiso: (paiste)
- \<4965bfdde2e5a5c883685019e57d123a3368a75e\>Django 4.1: compromiso: (paiste)
- \<f9a7fb8466a7ba4857eaf930099b5258f3eafb2b\>Django 3.2: compromiso: (paiste)

### Deireadh Fómhair 4, 2023 -:cve: 2023-43665

Féidearthacht diúltú seirbhíse i `Django.Utils.Text.Truncator`.  \< <https://www.djangoproject.com/weblog/2023/oct/04/security-releases/>\>

- \<be9c27c4d18c2e6a5be8af4e53c0797440794473\>Django 4.2: compromiso: (paiste)
- \<c7b7024742250414e426ad49fb80db943e7ba4e8\>Django 4.1: compromiso: (paiste)
- \<ccdade1a0262537868d7ca64374de3d957ca50c5\>Django 3.2: compromiso: (paiste)

### Meán Fómhair 4, 2023 -:cve: 2023-41164

Diúltú féideartha leochaileacht seirbhíse i django.utils.encoding.uri\_to\_iri () .  \< <https://www.djangoproject.com/weblog/2023/sep/04/security-releases/>\>

- \<9c51b4dcfa0cefcb48231f4d71cafa80821f87b9\>Django 4.2: compromiso: (paiste)
- \<ba00bc5ec6a7eff5e08be438f7b5b0e9574e8ff0\>Django 4.1: compromiso: (paiste)
- \<6f030b1149bd8fa4ba90452e77cb3edc095ce54e\>Django 3.2: compromiso: (paiste)

### 3 Iúil, 2023 -:cve: 2023-36053

Diúltú léirithe rialta féideartha ar leochaileacht seirbhíse i `EmailValidator`/URLValidator\`.  \< <https://www.djangoproject.com/weblog/2023/jul/03/security-releases/>\>

- \<b7c5feb35a31799de6e582ad6a5a91a9de74e0f9\>Django 4.2: compromiso: (paiste)
- \<beb3f3d55940d9aa7198bf9d424ab74e873aec3d\>Django 4.1: compromiso: (paiste)
- \<454f2fb93437f98917283336201b4048293f7582\>Django 3.2: compromiso: (paiste)

### Bealtaine 3, 2023 -:cve: 2023-31047

Seachbhóthar féideartha bailíochtaithe agus comhad iolracha á uaslódáil ag baint úsáide  \< <https://www.djangoproject.com/weblog/2023/may/03/security-releases/>\>

- \<21b1b1fc03e5f9e9f8c977ee6e35618dd3b353dd\>Django 4.2: compromiso: (paiste)
- \<e7c3a2ccc3a562328600be05068ed9149e12ce64\>Django 4.1: compromiso: (paiste)
- \<eed53d0011622e70b936e203005f0e6f4ac48965\>Django 3.2: compromiso: (paiste)

### 14 Feabhra, 2023 -:cve: 2023-24580

Leochaileacht féideartha seirbhíse a dhiúltú in uaslódáiltí  \< <https://www.djangoproject.com/weblog/2023/feb/14/security-releases/>\>

- \<628b33a854a9c68ec8a0c51f382f304a0044ec92\>Django 4.1: compromiso: (paiste)
- \<83f1ea83e4553e211c1c5a0dfc197b66d4e50432\>Django 4.0:commit: (paiste)
- \<a665ed5179f5bbd3db95ce67286d0192eff041d8\>Django 3.2: compromiso: (paiste)

### 1 Feabhra, 2023 -:cve: 2023-23969

Seirbhís a dhiúltú féideartha trí cheanntásca Accept-Teanga .  \< <https://www.djangoproject.com/weblog/2023/feb/01/security-releases/>\>

- \<9d7bd5a56b1ce0576e8e07a8001373576d277942\>Django 4.1: compromiso: (paiste)
- \<4452642f193533e288a52c02efb5bbc766a68f95\>Django 4.0:commit: (paiste)
- \<c7e0151fdf33e1b11d488b6f67b94fdf3a30614a\>Django 3.2: compromiso: (paiste)

### Deireadh Fómhair 4, 2022 -:cve: 2022-41323

Leochaileacht féideartha seirbhíse a dhiúltú in URLanna idirnáisiúnta.  \< <https://www.djangoproject.com/weblog/2022/oct/04/security-releases/>\>

- \<9d656ea51d9ea7105c0c0785783ac29d426a7d25\>Django 4.1: compromiso: (paiste)
- \<23f0093125ac2e553da6c1b2f9988eb6a3dd2ea1\>Django 4.0:commit: (paiste)
- \<5b6b257fa7ec37ff27965358800c67e2dd11c924\>Django 3.2: compromiso: (paiste)

### 3 Lúnasa, 2022 -:cve: 2022-36359

Leochaileacht ionchasach íoslódála comhaid léirithe i FileResponse  \< <https://www.djangoproject.com/weblog/2022/aug/03/security-releases/>\>

- \<b7d9529cbe0af4adabb6ea5d01ed8dcce3668fb3\>Django 4.0:commit: (paiste)
- \<b3e4494d759202a3b6bf247fd34455bf13be5b80\>Django 3.2: compromiso: (paiste)

### 4 Iúil, 2022 -:cve: 2022-34265

Instealladh SQL féideartha trí argóintí ```Trunc (cineál) ``agus ``Extract (lookup_name)```.  \< <https://www.djangoproject.com/weblog/2022/jul/04/security-releases/>\>

- \<0dc9c016fadb71a067e5a42be30164e3f96c0492\>Django 4.0:commit: (paiste)
- \<a9010fe5555e6086a9d9ae50069579400ef0685e\>Django 3.2: compromiso: (paiste)

### Aibreán 11, 2022 -:cve: 2022-28346

Instealladh SQL féideartha i ```QuerySet.annotate () ``, `comhiomlán ()```, agus extra () .  \< <https://www.djangoproject.com/weblog/2022/apr/11/security-releases/>\>

- \<800828887a0509ad1162d6d407e94d8de7eafc60\>Django 4.0:commit: (paiste)
- \<2044dac5c6968441be6f534c4139bcf48c5c7e48\>Django 3.2: compromiso: (paiste)
- \<2c09e68ec911919360d5f8502cefc312f9e03c5d\>Django 2.2:compromiso: (paiste)

### Aibreán 11, 2022 -:cve: 2022-28347

Instealladh SQL féideartha trí QuerySet.Explain (\*\* roghanna) ar PostgreSQL.  \< <https://www.djangoproject.com/weblog/2022/apr/11/security-releases/>\>

- \<00b0fc50e1738c7174c495464a5ef069408a4402\>Django 4.0:commit: (paiste)
- \<9e19accb6e0a00ba77d5a95a91675bf18877c72d\>Django 3.2: compromiso: (paiste)
- \<29a6c98b4c13af82064f993f0acc6e8fafa4d3f5\>Django 2.2:compromiso: (paiste)

### 1 Feabhra, 2022 -:cve: 2022-22818

XSS féideartha trí chlib teimpléad `{% debug%}`.  \< <https://www.djangoproject.com/weblog/2022/feb/01/security-releases/>\>

#### Leaganacha difear

- \<01422046065d2b51f8f613409cad2c81b39487e5\>Django 4.0:commit: (paiste)
- \<1a1e8278c46418bde24c86a65443b0674bae65e2\>Django 3.2: compromiso: (paiste)
- \<c27a7eb9f40b64990398978152e62b6ff839c2e6\>Django 2.2:compromiso: (paiste)

### 1 Feabhra, 2022 -:cve: 2022-23833

Féidearthacht seirbhíse a dhiúltú in uaslódálacha comhad.  \< <https://www.djangoproject.com/weblog/2022/feb/01/security-releases/>\>

#### Leaganacha difear

- \<f9c7d48fdd6f198a6494a9202f90242f176e4fc9\>Django 4.0:commit: (paiste)
- \<d16133568ef9c9b42cb7a08bdf9ff3feec2e5468\>Django 3.2: compromiso: (paiste)
- \<c477b761804984c932704554ad35f78a2e230c6a\>Django 2.2:compromiso: (paiste)

### 4 Eanáir, 2022 -:cve: 2021-45452

Aistritheoireacht féideartha trí Storage.save () .  \< <https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>\>

#### Leaganacha difear

- \<e1592e0f26302e79856cc7f2218ae848ae19b0f6\>Django 4.0:commit: (paiste)
- \<8d2f7cff76200cbd2337b2cf1707e383eb1fb54b\>Django 3.2: compromiso: (paiste)
- \<4cb35b384ceef52123fc66411a73c36a706825e1\>Django 2.2:compromiso: (paiste)

### 4 Eanáir, 2022 -:cve: 2021-45116

Nochtadh faisnéise féideartha i scagaire teimpléad dictsort.  \< <https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>\>

#### Leaganacha difear

- \<2a8ec7f546d6d5806e221ec948c5146b55bd7489\>Django 4.0:commit: (paiste)
- \<c7fe895bca06daf12cc1670b56eaf72a1ef27a16\>Django 3.2: compromiso: (paiste)
- \<c9f648ccfac5ab90fb2829a66da4f77e68c7f93a\>Django 2.2:compromiso: (paiste)

### 4 Eanáir, 2022 -:cve: 2021-45115

Féidearthacht seirbhíse a dhiúltú i `UserAttributeSimilarityValidator`.  \< <https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>\>

#### Leaganacha difear

- \<df79ef03ac867c93caaa6be56bc69e66abfeef8f\>Django 4.0:commit: (paiste)
- \<a8b32fe13bcaed1c0b772fdc53de84abc224fb20\>Django 3.2: compromiso: (paiste)
- \<2135637fdd5ce994de110affef9e67dffdf77277\>Django 2.2:compromiso: (paiste)

### 7 Nollaig, 2021 -:cve: 2021-44420

Seachbhóthar féideartha rialú rochtana suas srutha bunaithe ar chosáin URL.  \< <https://www.djangoproject.com/weblog/2021/dec/07/security-releases/>\>

#### Leaganacha difear

- \<333c65603032c377e682cdbd7388657a5463a05a\>Django 3.2: compromiso: (paiste)
- \<22bd17488159601bf0741b70ae7932bffea8eced\>Django 3.1: compromiso: (paiste)
- \<7cf7d74e8a754446eeb85cacf2fef1247e0cb6d7\>Django 2.2:compromiso: (paiste)

### 1 Iúil, 2021 -:cve: 2021-35042

Instealladh SQL féideartha trí ionchur QuerySet.order\_by ()  \< <https://www.djangoproject.com/weblog/2021/jul/01/security-releases/>\>

#### Leaganacha difear

- \<a34a5f724c5d5adb2109374ba3989ebb7b11f81f\>Django 3.2: compromiso: (paiste)
- \<0bd57a879a0d54920bb9038a732645fb917040e9\>Django 3.1: compromiso: (paiste)

### 2 Meitheamh, 2021 -:cve: 2021-33203

Aistriú eolaire féideartha trí admindocs\`.  \< <https://www.djangoproject.com/weblog/2021/jun/02/security-releases/>\>

#### Leaganacha difear

- \<dfaba12cda060b8b292ae1d271b44bf810b1c5b9\>Django 3.2: compromiso: (paiste)
- \<20c67a0693c4ede2b09af02574823485e82e4c8f\>Django 3.1: compromiso: (paiste)
- \<053cc9534d174dc89daba36724ed2dcb36755b90\>Django 2.2:compromiso: (paiste)

### 2 Meitheamh, 2021 -:cve: 2021-33571

Ionsaithe neamhchinnte féideartha SSRF, RFI, agus LFI ó ghlac bailíochtóirí le nialas tosaigh i seoltaí IPv4.  \< <https://www.djangoproject.com/weblog/2021/jun/02/security-releases/>\>

#### Leaganacha difear

- \<9f75e2e562fa0c0482f3dde6fc7399a9070b4a3d\>Django 3.2: compromiso: (paiste)
- \<203d4ab9ebcd72fc4d6eb7398e66ed9e474e118e\>Django 3.1: compromiso: (paiste)
- \<f27c38ab5d90f68c9dd60cabef248a570c0be8fc\>Django 2.2:compromiso: (paiste)

### Bealtaine 6, 2021 -:cve: 2021-32052

Féidearthacht insteallta ceanntásc ós rud é gur ghlac  \< <https://www.djangoproject.com/weblog/2021/may/06/security-releases/>\>

#### Leaganacha difear

- \<2d2c1d0c97832860fbd6597977e2aae17dd7e5b2\>Django 3.2: compromiso: (paiste)
- \<afb23f5929944a407e4990edef1c7806a94c9879\>Django 3.1: compromiso: (paiste)
- \<d9594c4ea57b6309d93879805302cec9ae9f23ff\>Django 2.2:compromiso: (paiste)

### Bealtaine 4, 2021 -:cve: 2021-31542

Aistritheoireacht féideartha trí chomhaid uaslódáilte  \< <https://www.djangoproject.com/weblog/2021/may/04/security-releases/>\>

#### Leaganacha difear

- \<c98f446c188596d4ba6de71d1b77b4a6c5c2a007\>Django 3.2: compromiso: (paiste)
- \<25d84d64122c15050a0ee739e859f22ddab5ac48\>Django 3.1: compromiso: (paiste)
- \<04ac1624bdc2fa737188401757cf95ced122d26d\>Django 2.2:compromiso: (paiste)

### Aibreán 6, 2021 -:cve: 2021-28658

Aistritheoireacht féideartha trí chomhaid uaslódáilte  \< <https://www.djangoproject.com/weblog/2021/apr/06/security-releases/>\>

#### Leaganacha difear

- \<2820fd1be5dfccbf1216c3845fad8580502473e1\>Django 3.2: compromiso: (paiste)
- \<cca0d98118cccf9ae0c6dcf2d6c57fc50469fbf0\>Django 3.1: compromiso: (paiste)
- \<e7fba62248f604c76da4f23dcf1db4a57b0808ea\>Django 3.0:commit: (paiste)
- \<4036d62bda0e9e9f6172943794b744a454ca49c2\>Django 2.2:compromiso: (paiste)

### Feabhra 19, 2021 -:cve: 2021-23336

Nimhiú taisce gréasáin trí django.utils.http.limited\_parse\_qsl () .  \< <https://www.djangoproject.com/weblog/2021/feb/19/security-releases/>\>

#### Leaganacha difear

- \<be8237c7cce24b06aabde0b97afce98ddabbe3b6\>Django 3.2: compromiso: (paiste)
- \<8f6d431b08cbb418d9144b976e7b972546607851\>Django 3.1: compromiso: (paiste)
- \<326a926beef869d3341bc9ef737887f0449b6b71\>Django 3.0:commit: (paiste)
- \<fd6b6afd5959b638c62dbf4839ccff97e7f7dfda\>Django 2.2:compromiso: (paiste)

### Feabhra 1, 2021 -:cve: 2021-3281

Aistriú féideartha stiúrthóireachta trí archive.extract () \`.  \< <https://www.djangoproject.com/weblog/2021/feb/01/security-releases/>\>

#### Leaganacha difear

- \<02e6592835b4559909aa3aaaf67988fef435f624\>Django 3.1: compromiso: (paiste)
- \<52e409ed17287e9aabda847b6afe58be2fa9f86a\>Django 3.0:commit: (paiste)
- \<21e7622dec1f8612c85c2fc37fe8efbfd3311e37\>Django 2.2:compromiso: (paiste)

### Meán Fómhair 1, 2020 -:cve: 2020-24584

Méadú ceada in eolairí idirleibhéil taisce an chórais chomhaid ar Python 3.7+.  \< <https://www.djangoproject.com/weblog/2020/sep/01/security-releases/>\>

#### Leaganacha difear

- \<2b099caa5923afa8cfb5f1e8c0d56b6e0e81915b\>Django 3.1: compromiso: (paiste)
- \<cdb367c92a0ba72ddc0cbd13ff42b0e6df709554\>Django 3.0:commit: (paiste)
- \<a3aebfdc8153dc230686b6d2454ccd32ed4c9e6f\>Django 2.2:compromiso: (paiste)

### Meán Fómhair 1, 2020 -:cve: 2020-24583

Ceadanna míchearta ar eolairí idirleibhéil ar Python 3.7+.  \< <https://www.djangoproject.com/weblog/2020/sep/01/security-releases/>\>

#### Leaganacha difear

- \<934430d22aa5d90c2ba33495ff69a6a1d997d584\>Django 3.1: compromiso: (paiste)
- \<08892bffd275c79ee1f8f67639eb170aaaf1181e\>Django 3.0:commit: (paiste)
- \<375657a71c889c588f723469bd868bd1d40c369f\>Django 2.2:compromiso: (paiste)

### 3 Meitheamh, 2020 -:cve: 2020-13596

XSS féideartha trí admin `ForeignKeyWidget`.  \< <https://www.djangoproject.com/weblog/2020/jun/03/security-releases/>\>

#### Leaganacha difear

- \<1f2dd37f6fcefdd10ed44cb233b2e62b520afb38\>Django 3.0:commit: (paiste)
- \<6d61860b22875f358fac83d903dc629897934815\>Django 2.2:compromiso: (paiste)

### 3 Meitheamh, 2020 -:cve: 2020-13254

Sceitheadh sonraí féideartha trí eochracha memcached míchfhoirmithe.  \< <https://www.djangoproject.com/weblog/2020/jun/03/security-releases/>\>

#### Leaganacha difear

- \<84b2da5552e100ae3294f564f6c862fef8d0e693\>Django 3.0:commit: (paiste)
- \<07e59caa02831c4569bbebb9eb773bdd9cb4b206\>Django 2.2:compromiso: (paiste)

### 4 Márta, 2020 -:cve: 2020-9402

Instealladh SQL féideartha trí pharaiméadar “lamháltas” i bhfeidhmeanna agus comhiomlánaithe GIS ar Oracle.  \< <https://www.djangoproject.com/weblog/2020/mar/04/security-releases/>\>

#### Leaganacha difear

- \<26a5cf834526e291db00385dd33d319b8271fc4c\>Django 3.0:commit: (paiste)
- \<fe886a3b58a93cfbe8864b485f93cb6d426cd1f2\>Django 2.2:compromiso: (paiste)
- \<02d97f3c9a88adc890047996e5606180bd1c6166\>Django 1.11: commit: (paiste)

### Feabhra 3, 2020 -:cve: 2020-7471

Instealladh SQL féideartha trí StringaGg (teorannaitheoir) .  \< <https://www.djangoproject.com/weblog/2020/feb/03/security-releases/>\>

#### Leaganacha difear

- \<505826b469b16ab36693360da9e11fd13213421b\>Django 3.0:commit: (paiste)
- \<c67a368c16e4680b324b4f385398d638db4d8147\>Django 2.2:compromiso: (paiste)
- \<001b0634cd309e372edb6d7d95d083d02b8e37bd\>Django 1.11: commit: (paiste)

### 18 Nollaig, 2019 -:cve: 2019-19844

Fuadach cuntas féideartha trí fhoirm athshocraithe pasfhocal.  \< <https://www.djangoproject.com/weblog/2019/dec/18/security-releases/>\>

#### Leaganacha difear

- \<302a4ff1e8b1c798aab97673909c7a3dfda42c26\>Django 3.0:commit: (paiste)
- \<4d334bea06cac63dc1272abcec545b85136cca0e\>Django 2.2:compromiso: (paiste)
- \<f4cff43bf921fcea6a29b726eb66767f67753fa2\>Django 1.11: commit: (paiste)

### 2 Nollaig, 2019 -:cve: 2019-19118

Méadú pribhléid i riarachán Django.  \< <https://www.djangoproject.com/weblog/2019/dec/02/security-releases/>\>

#### Leaganacha difear

- \<092cd66cf3c3e175acce698d6ca2012068d878fa\>Django 3.0:commit: (paiste)
- \<36f580a17f0b3cb087deadf3b65eea024f479c21\>Django 2.2:compromiso: (paiste)
- \<103ebe2b5ff1b2614b85a52c239f471904d26244\>Django 2.1: compromiso: (paiste)

### 1 Lúnasa, 2019 -:cve: 2019-14235

Ídiú cuimhne féideartha i django.utils.encoding.uri\_to\_iri () .  \< <https://www.djangoproject.com/weblog/2019/aug/01/security-releases/>\>

#### Leaganacha difear

- \<cf694e6852b0da7799f8b53f1fb2f7d20cf17534\>Django 2.2:compromiso: (paiste)
- \<5d50a2e5fa36ad23ab532fc54cf4073de84b3306\>Django 2.1: compromiso: (paiste)
- \<869b34e9b3be3a4cfcb3a145f218ffd3f5e3fd79\>Django 1.11: commit: (paiste)

### 1 Lúnasa, 2019 -:cve: 2019-14234

Féidearthacht insteallta SQL i gcuardach eochair agus innéacs do `JSONField`/`hStorefield`.  \< <https://www.djangoproject.com/weblog/2019/aug/01/security-releases/>\>

#### Leaganacha difear

- \<4f5b58f5cd3c57fee9972ab074f8dc6895d8f387\>Django 2.2:compromiso: (paiste)
- \<f74b3ae3628c26e1b4f8db3d13a91d52a833a975\>Django 2.1: compromiso: (paiste)
- \<ed682a24fca774818542757651bfba576c3fc3ef\>Django 1.11: commit: (paiste)

### 1 Lúnasa, 2019 -:cve: 2019-14233

Féidearthacht seirbhíse a dhiúltú i strip\_tags () \`.  \< <https://www.djangoproject.com/weblog/2019/aug/01/security-releases/>\>

#### Leaganacha difear

- \<e34f3c0e9ee5fc9022428fe91640638bafd4cda7\>Django 2.2:compromiso: (paiste)
- \<5ff8e791148bd451180124d76a55cb2b2b9556eb\>Django 2.1: compromiso: (paiste)
- \<52479acce792ad80bb0f915f20b835f919993c72\>Django 1.11: commit: (paiste)

### 1 Lúnasa, 2019 -:cve: 2019-14232

Féidearthacht diúltú seirbhíse i `Django.Utils.Text.Truncator`.  \< <https://www.djangoproject.com/weblog/2019/aug/01/security-releases/>\>

#### Leaganacha difear

- \<c3289717c6f21a8cf23daff1c78c0c014b94041f\>Django 2.2:compromiso: (paiste)
- \<c23723a1551340cc7d3126f04fcfd178fa224193\>Django 2.1: compromiso: (paiste)
- \<42a66e969023c00536256469f0e8b8a099ef109d\>Django 1.11: commit: (paiste)

### 1 Iúil, 2019 -:cve: 2019-12781

Braite HTTP mícheart le seachfhreastalaí droim ag nascadh trí HTTPS.  \< <https://www.djangoproject.com/weblog/2019/jul/01/security-releases/>\>

#### Leaganacha difear

- \<77706a3e4766da5d5fb75c4db22a0a59a28e6cd6\>Django 2.2:compromiso: (paiste)
- \<1e40f427bb8d0fb37cc9f830096a97c36c97af6f\>Django 2.1: compromiso: (paiste)
- \<32124fc41e75074141b05f10fc55a4f01ff7f050\>Django 1.11: commit: (paiste)

### 3 Meitheamh, 2019 -:cve: 2019-12308

XSS trí nasc “URL reatha” a ghineann `adminURLFieldWidget`.  \< <https://www.djangoproject.com/weblog/2019/jun/03/security-releases/>\>

#### Leaganacha difear

- \<afddabf8428ddc89a332f7a78d0d21eaf2b5a673\>Django 2.2:compromiso: (paiste)
- \<09186a13d975de6d049f8b3e05484f66b01ece62\>Django 2.1: compromiso: (paiste)
- \<c238701859a52d584f349cce15d56c8e8137c52b\>Django 1.11: commit: (paiste)

### 3 Meitheamh, 2019 -:cve: 2019-11358

Truailliú fréamhshamhail i jQuery cuacail.  \< <https://www.djangoproject.com/weblog/2019/jun/03/security-releases/>\>

#### Leaganacha difear

- \<baaf187a4e354bf3976c51e2c83a0d2f8ee6e6ad\>Django 2.2:compromiso: (paiste)
- \<95649bc08547a878cebfa1d019edec8cb1b80829\>Django 2.1: compromiso: (paiste)

### 11 Feabhra, 2019 -:cve: 2019-6975

Ídiú cuimhne i django.utils.numberformat.format () .  \< <https://www.djangoproject.com/weblog/2019/feb/11/security-releases/>\>

#### Leaganacha difear

- \<40cd19055773705301c3428ed5e08a036d2091f3\>Django 2.1: compromiso: (paiste)
- \<392e040647403fc8007708d52ce01d915b014849\>Django 2.0:commit: (paiste agus \<1f42f82566c9d2d73aff1c42790d6b1b243f7676\>:commit: ceartú) \`
- \<0bbb560183fabf0533289700845dafa94951f227\>Django 1.11: commit: (paiste)

### 4 Eanáir, 2019 -:cve: 2019-3498

Féidearthacht spoofing ábhair sa leathanach réamhshocraithe 404.  \< <https://www.djangoproject.com/weblog/2019/jan/04/security-releases/>\>

#### Leaganacha difear

- \<64d2396e83aedba3fcc84ca40f23fbd22f0b9b5b\>Django 2.1: compromiso: (paiste)
- \<9f4ed7c94c62e21644ef5115e393ac426b886f2e\>Django 2.0:commit: (paiste)
- \<1cd00fcf52d089ef0fe03beabd05d59df8ea052a\>Django 1.11: commit: (paiste)

### Deireadh Fómhair 1, 2018 -:cve: 2018-16984

Nochtadh hash pasfhocal d'úsáideoirí riaracháin “féach amháin”.  \< <https://www.djangoproject.com/weblog/2018/oct/01/security-release/>\>

#### Leaganacha difear

- \<c4bd5b597e0aa2432e4c867b86650f18af117851\>Django 2.1: compromiso: (paiste)

### 1 Lúnasa, 2018 -:cve: 2018-14574

Oscail an fhéidearthacht atreoraithe i CommonMiddleware\`.  \< <https://www.djangoproject.com/weblog/2018/aug/01/security-releases/>\>

#### Leaganacha difear

- \<c4e5ff7fdb5fce447675e90291fd33fddd052b3c\>Django 2.1: compromiso: (paiste)
- \<6fffc3c6d420e44f4029d5643f38d00a39b08525\>Django 2.0:commit: (paiste)
- \<d6eaee092709aad477a9894598496c6deec532ff\>Django 1.11: commit: (paiste)

### 6 Márta, 2018 -:cve: 2018-7537

Féidearthacht seirbhíse a dhiúltú i scagairí teimpléad `truncatechars_html` agus `truncatewords_html`.  \< <https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>\>

#### Leaganacha difear

- \<94c5da1d17a6b0d378866c66b605102c19f7988c\>Django 2.0:commit: (paiste)
- \<a91436360b79a6ff995c3e5018bcc666dfaf1539\>Django 1.11: commit: (paiste)
- \<d17974a287a6ea2e361daff88fcc004cbd6835fa\>Django 1.8: compromiso: (paiste)

### 6 Márta, 2018 -:cve: 2018-7536

Féidearthacht seirbhíse a dhiúltú i scagairí teimpléad `urlize` agus `urlizetrunc`.  \< <https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>\>

#### Leaganacha difear

- \<e157315da3ae7005fa0683ffc9751dbeca7306c8\>Django 2.0:commit: (paiste)
- \<abf89d729f210c692a50e0ad3f75fb6bec6fae16\>Django 1.11: commit: (paiste)
- \<1ca63a66ef3163149ad822701273e8a1844192c2\>Django 1.8: compromiso: (paiste)

### 1 Feabhra, 2018 -:cve: 2018-6188

Sceitheadh faisnéise i “Form Fíordheimhniúcháin”.  \< <https://www.djangoproject.com/weblog/2018/feb/01/security-releases/>\>

#### Leaganacha difear

- \<c37bb28677295f6edda61d8ac461014ef0d3aeb2\>Django 2.0:commit: (paiste)
- \<57b95fedad5e0b83fc9c81466b7d1751c6427aae\>Django 1.11: commit: (paiste)

### Meán Fómhair 5, 2017 -:cve: 2017-12794

XSS féideartha i gcuid rianaithe de leathanach dífhabhtaithe teicniúil 500.  \< <https://www.djangoproject.com/weblog/2017/sep/05/security-releases/>\>

#### Leaganacha difear

- \<e35a0c56086924f331e9422daa266e907a4784cc\>Django 1.11: commit: (paiste)
- \<58e08e80e362db79eb0fd775dc81faad90dca47a\>Django 1.10: compromiso: (paiste)

### Aibreán 4, 2017 -:cve: 2017-7234

Oscail leochaileacht atreoraithe i django.views.static.serve () .  \< <https://www.djangoproject.com/weblog/2017/apr/04/security-releases/>\>

#### Leaganacha difear

- \<2a9f6ef71b8e23fd267ee2be1be26dde8ab67037\>Django 1.10: compromiso: (paiste)
- \<5f1ffb07afc1e59729ce2b283124116d6c0659e4\>Django 1.9: compromiso: (paiste)
- \<4a6b945dffe8d10e7cec107d93e6efaebfbded29\>Django 1.8: compromiso: (paiste)

### Aibreán 4, 2017 -:cve: 2017-7233

Athsheoladh oscailte agus ionsaí XSS féideartha trí URLanna athsheolta uimhriúla a sholáthraítear leis  \< <https://www.djangoproject.com/weblog/2017/apr/04/security-releases/>\>

#### Leaganacha difear

- \<f824655bc2c50b19d2f202d7640785caabc82787\>Django 1.10: compromiso: (paiste)
- \<254326cb3682389f55f886804d2c43f7b9f23e4f\>Django 1.9: compromiso: (paiste)
- \<8339277518c7d8ec280070a780915304654e3b66\>Django 1.8: compromiso: (paiste)

### 1 Samhain, 2016 -:cve: 2016-9014

Leochaileacht DNS a athcheangal nuair a bheidh debug = true\`.  \< <https://www.djangoproject.com/weblog/2016/nov/01/security-releases/>\>

#### Leaganacha difear

- \<884e113838e5a72b4b0ec9e5e87aa480f6aa4472\>Django 1.10: compromiso: (paiste)
- \<45acd6d836895a4c36575f48b3fb36a3dae98d19\>Django 1.9: compromiso: (paiste)
- \<c401ae9a7dfb1a94a8a61927ed541d6f93089587\>Django 1.8: compromiso: (paiste)

### 1 Samhain, 2016 -:cve: 2016-9013

Úsáideoir le pasfhocal crua-chódaithe a cruthaíodh agus tástálacha á reáchtáil  \< <https://www.djangoproject.com/weblog/2016/nov/01/security-releases/>\>

#### Leaganacha difear

- \<34e10720d81b8d407aa14d763b6a7fe8f13b4f2e\>Django 1.10: compromiso: (paiste)
- \<4844d86c7728c1a5a3bbce4ad336a8d32304072b\>Django 1.9: compromiso: (paiste)
- \<70f99952965a430daf69eeb9947079aae535d2d0\>Django 1.8: compromiso: (paiste)

### Meán Fómhair 26, 2016 -:cve: 2016-7401

Seachbhóthar cosanta CSRF ar shuíomh le Google Analytics.  \< <https://www.djangoproject.com/weblog/2016/sep/26/security-releases/>\>

#### Leaganacha difear

- \<d1bc980db1c0fffd6d60677e62f70beadb9fe64a\>Django 1.9: compromiso: (paiste)
- \<6118ab7d0676f0d622278e5be215f14fb5410b6a\>Django 1.8: compromiso: (paiste)

### 18 Iúil, 2016 -:cve: 2016-6186

XSS i anaisín a bhaineann le cuirte/athrú riaracháin.  \< <https://www.djangoproject.com/weblog/2016/jul/18/security-releases/>\>

#### Leaganacha difear

- \<d03bf6fe4e9bf5b07de62c1a271c4b41a7d3d158\>Django 1.9: compromiso: (paiste)
- \<f68e5a99164867ab0e071a936470958ed867479d\>Django 1.8: compromiso: (paiste)

### 1 Márta, 2016 -:cve: 2016-2513

Áireamh úsáideora trí dhifríocht uainiúcháin ar uasghrádú fachtóra oibre pasfhocal.  \< <https://www.djangoproject.com/weblog/2016/mar/01/security-releases/>\>

#### Leaganacha difear

- \<af7d09b0c5c6ab68e629fd9baf736f9dd203b18e\>Django 1.9: compromiso: (paiste)
- \<f4e6e02f7713a6924d16540be279909ff4091eb6\>Django 1.8: compromiso: (paiste)

### 1 Márta, 2016 -:cve: 2016-2512

Atreorú mailíseach agus ionsaí XSS féideartha trí URLanna atreoraithe a sholáthraíonn an úsáideoir ina bhfuil bunúsach  \< <https://www.djangoproject.com/weblog/2016/mar/01/security-releases/>\>

#### Leaganacha difear

- \<fc6d147a63f89795dbcdecb0559256470fff4380\>Django 1.9: compromiso: (paiste)
- \<382ab137312961ad62feb8109d70a5a581fe8350\>Django 1.8: compromiso: (paiste)

### Feabhra 1, 2016 -:cve: 2016-2048

Is féidir le húsáideoir le cead “athrú” ach ní “cuir leis” rudaí a chruthú do ModelAdmin\` le save\_as = true\`.  \< <https://www.djangoproject.com/weblog/2016/feb/01/releases-192-and-189/>\>

#### Leaganacha difear

- \<adbca5e4db42542575734b8e5d26961c8ada7265\>Django 1.9: compromiso: (paiste)

### 24 Samhain, 2015 -:cve: 2015-8213

Féidearthacht sceitheadh socruithe i scagaire teimpléad dáta .  \< <https://www.djangoproject.com/weblog/2015/nov/24/security-releases-issued/>\>

#### Leaganacha difear

- \<9f83fc2f66f5a0bac7c291aec55df66050bb6991\>Django 1.8: compromiso: (paiste)
- \<8a01c6b53169ee079cb21ac5919fdafcc8c5e172\>Django 1.7:commit: (paiste)

### 18 Lúnasa, 2015 -:cve: 2015-5963 /:cve: 2015-5964

Féidearthacht seirbhíse a dhiúltú i radharc logáil amach () trí stór seisiúin a líonadh.  \< <https://www.djangoproject.com/weblog/2015/aug/18/security-releases/>\>

#### Leaganacha difear

- \<2eb86b01d7b59be06076f6179a454d0fd0afaff6\>Django 1.8: compromiso: (paiste)
- \<2f5485346ee6f84b4e52068c04e043092daf55f7\>Django 1.7:commit: (paiste)
- \<575f59f9bc7c59a5e41a081d1f5f55fc859c5012\>Django 1.4: compromiso: (paiste)

### 8 Iúil, 2015 -:cve: 2015-5145

Féidearthacht seirbhíse a dhiúltú i mbailíochtú URL.  \< <https://www.djangoproject.com/weblog/2015/jul/08/security-releases/>\>

#### Leaganacha difear

- \<8f9a4d3a2bc42f14bb437defd30c7315adbff22c\>Django 1.8: compromiso: (paiste)

### 8 Iúil, 2015 -:cve: 2015-5144

Féidearthacht insteallta ceanntásc ós rud é go nglacann bailíochtóirí línte nua  \< <https://www.djangoproject.com/weblog/2015/jul/08/security-releases/>\>

#### Leaganacha difear

- \<574dd5e0b0fbb877ae5827b1603d298edc9bb2a0\>Django 1.8: compromiso: (paiste)
- \<ae49b4d994656bc037513dcd064cb9ce5bb85649\>Django 1.7:commit: (paiste)
- \<1ba1cdce7d58e6740fe51955d945b56ae51d072a\>Django 1.4: compromiso: (paiste)

### 8 Iúil, 2015 -:cve: 2015-5143

Féidearthacht seirbhíse a dhiúltú trí stór seisiún a líonadh.  \< <https://www.djangoproject.com/weblog/2015/jul/08/security-releases/>\>

#### Leaganacha difear

- \<66d12d1ababa8f062857ee5eb43276493720bf16\>Django 1.8: compromiso: (paiste)
- \<1828f4341ec53a8684112d24031b767eba557663\>Django 1.7:commit: (paiste)
- \<2e47f3e401c29bc2ba5ab794d483cb0820855fb9\>Django 1.4: compromiso: (paiste)

### Bealtaine 20, 2015 -:cve: 2015-3982

Sruthú seisiún seasta sa chúltaca cached\_db.  \< <https://www.djangoproject.com/weblog/2015/may/20/security-release/>\>

#### Leaganacha difear

- \<31cb25adecba930bdeee4556709f5a1c42d88fd6\>Django 1.8: compromiso: (paiste)

### 18 Márta, 2015 -:cve: 2015-2317

Ionsaí XSS féideartha a mhaolú trí URLanna atreoraithe a sholáthraíonn an úsáideoir.  \< <https://www.djangoproject.com/weblog/2015/mar/18/security-releases/>\>

#### Leaganacha difear

- \<2342693b31f740a422abf7267c53b4e7bc487c1b\>Django 1.4: compromiso: (paiste)
- \<5510f070711540aaa8d3707776cd77494e688ef9\>Django 1.6: compromiso: (paiste)
- \<2a4113dbd532ce952308992633d802dc169a75f1\>Django 1.7:commit: (paiste)
- \<770427c2896a078925abfca2317486b284d22f04\>Django 1.8: compromiso: (paiste)

### 18 Márta, 2015 -:cve: 2015-2316

Féidearthacht seirbhíse a dhiúltú le strip\_tags () \`.  \< <https://www.djangoproject.com/weblog/2015/mar/18/security-releases/>\>

#### Leaganacha difear

- \<b6b3cb9899214a23ebb0f4ebf0e0b300b0ee524f\>Django 1.6: compromiso: (paiste)
- \<e63363f8e075fa8d66326ad6a1cc3391cc95cd97\>Django 1.7:commit: (paiste)
- \<5447709a571cd5d95971f1d5d21d4a7edcf85bbd\>Django 1.8: compromiso: (paiste)

### 9 Márta, 2015 -:cve: 2015-2241

Ionsaí XSS trí airíonna in `ModelAdmin.ReadOnly_Fields`.  \< <https://www.djangoproject.com/weblog/2015/mar/09/security-releases/>\>

#### Leaganacha difear

- \<d16e4e1d6f95e6f46bff53cc4fd0ab398b8e5059\>Django 1.7:commit: (paiste)
- \<2654e1b93923bac55f12b4e66c5e39b16695ace5\>Django 1.8: compromiso: (paiste)

### 13 Eanáir, 2015 -:cve: 2015-0222

Diúltú seirbhíse bunachar sonraí le ModelMultipleChoiceField\`.  \< <https://www.djangoproject.com/weblog/2015/jan/13/security/>\>

#### Leaganacha difear

- \<d7a06ee7e571b6dad07c0f5b519b1db02e2a476c\>Django 1.6: compromiso: (paiste)
- \<bcfb47780ce7caecb409a9e9c1c314266e41d392\>Django 1.7:commit: (paiste)

### 13 Eanáir, 2015 -:cve: 2015-0221

Ionsaí diúltaithe seirbhíse i gcoinne django.views.static.serve () .  \< <https://www.djangoproject.com/weblog/2015/jan/13/security/>\>

#### Leaganacha difear

- \<d020da6646c5142bc092247d218a3d1ce3e993f7\>Django 1.4: compromiso: (paiste)
- \<553779c4055e8742cc832ed525b9ee34b174934f\>Django 1.6: compromiso: (paiste)
- \<818e59a3f0fbadf6c447754d202d88df025f8f2a\>Django 1.7:commit: (paiste)

### 13 Eanáir, 2015 -:cve: 2015-0220

Ionsaí XSS féideartha a mhaolú trí URLanna atreoraithe a sholáthraíonn an úsáideoir.  \< <https://www.djangoproject.com/weblog/2015/jan/13/security/>\>

#### Leaganacha difear

- \<4c241f1b710da6419d9dca160e80b23b82db7758\>Django 1.4: compromiso: (paiste)
- \<72e0b033662faa11bb7f516f18a132728aa0ae28\>Django 1.6: compromiso: (paiste)
- \<de67dedc771ad2edec15c1d00c083a1a084e1e89\>Django 1.7:commit: (paiste)

### 13 Eanáir, 2015 -:cve: 2015-0219

Spaáil ceanntásc WSGI trí chomhcheangal fo-scór/dash.  \< <https://www.djangoproject.com/weblog/2015/jan/13/security/>\>

#### Leaganacha difear

- \<4f6fffc1dc429f1ad428ecf8e6620739e8837450\>Django 1.4: compromiso: (paiste)
- \<d7597b31d5c03106eeba4be14a33b32a5e25f4ee\>Django 1.6: compromiso: (paiste)
- \<41b4bc73ee0da7b2e09f4af47fc1fd21144c710f\>Django 1.7:commit: (paiste)

### 20 Lúnasa, 2014 -:cve: 2014-0483

Sceitheadh sonraí trí ionramháil querystring i riarachán.  \< <https://www.djangoproject.com/weblog/2014/aug/20/security/>\>

#### Leaganacha difear

- \<027bd348642007617518379f8b02546abacaa6e0\>Django 1.4: compromiso: (paiste)
- \<2a446c896e7c814661fb9c4f212b071b2a7fa446\>Django 1.5:commit: (paiste)
- \<f7c494f2506250b8cb5923714360a3642ed63e0f\>Django 1.6: compromiso: (paiste)
- \<2b31342cdf14fc20e07c43d258f1e7334ad664a6\>Django 1.7:commit: (paiste)

### 20 Lúnasa, 2014 -:cve: 2014-0482

Fuadach seisiún `RemoteUserMiddleWare`.  \< <https://www.djangoproject.com/weblog/2014/aug/20/security/>\>

#### Leaganacha difear

- \<c9e3b9949cd55f090591fbdc4a114fcb8368b6d9\>Django 1.4: compromiso: (paiste)
- \<dd68f319b365f6cb38c5a6c106faf4f6142d7d88\>Django 1.5:commit: (paiste)
- \<0268b855f9eab3377f2821164ef3e66037789e09\>Django 1.6: compromiso: (paiste)
- \<1a45d059c70385fcd6f4a3955f3b4e4cc96d0150\>Django 1.7:commit: (paiste)

### 20 Lúnasa, 2014 -:cve: 2014-0481

Diúltú seirbhíse uaslódáil comhad.  \< <https://www.djangoproject.com/weblog/2014/aug/20/security/>\>

#### Leaganacha difear

- \<30042d475bf084c6723c6217a21598d9247a9c41\>Django 1.4: compromiso: (paiste)
- \<26cd48e166ac4d84317c8ee6d63ac52a87e8da99\>Django 1.5:commit: (paiste)
- \<dd0c3f4ee1a30c1a1e6055061c6ba6e58c6b54d1\>Django 1.6: compromiso: (paiste)
- \<3123f8452cf49071be9110e277eea60ba0032216\>Django 1.7:commit: (paiste)

### 20 Lúnasa, 2014 -:cve: 2014-0480

Is féidir le reverse () URLanna a ghiniúint ag díriú chuig óstach eile.  \< <https://www.djangoproject.com/weblog/2014/aug/20/security/>\>

#### Leaganacha difear

- \<c2fe73133b62a1d9e8f7a6b43966570b14618d7e\>Django 1.4: compromiso: (paiste)
- \<45ac9d4fb087d21902469fc22643f5201d41a0cd\>Django 1.5:commit: (paiste)
- \<da051da8df5e69944745072611351d4cfc6435d5\>Django 1.6: compromiso: (paiste)
- \<bf650a2ee78c6d1f4544a875dcc777cf27fe93e9\>Django 1.7:commit: (paiste)

### Bealtaine 18, 2014 -:cve: 2014-3730

URLanna míchfhoirmithe ó ionchur úsáideora bailíochtaithe go mícheart.  \< <https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/>\>

#### Leaganacha difear

- \<7feb54bbae3f637ab3c4dd4831d4385964f574df\>Django 1.4: compromiso: (paiste)
- \<ad32c218850ad40972dcef57beb460f8c979dd6d\>Django 1.5:commit: (paiste)
- \<601107524523bca02376a0ddc1a06c6fdb8f22f3\>Django 1.6: compromiso: (paiste)
- \<e7b0cace455c2da24492660636bfd48c45a19cdf\>Django 1.7:commit: (paiste)

### Bealtaine 18, 2014 -:cve: 2014-1418

Féadfar cead a thabhairt do chaches sonraí príobháideacha a stóráil agus a sheirbhí  \< <https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/>\>

#### Leaganacha difear

- \<28e23306aa53bbbb8fb87db85f99d970b051026c\>Django 1.4: compromiso: (paiste)
- \<4001ec8698f577b973c5a540801d8a0bbea1205b\>Django 1.5:commit: (paiste)
- \<1abcf3a808b35abae5d425ed4d44cb6e886dc769\>Django 1.6: compromiso: (paiste)
- \<7fef18ba9e5a8b47bc24b5bb259c8bf3d3879f2a\>Django 1.7:commit: (paiste)

### Aibreán 21, 2014 -:cve: 2014-0474

Bíonn torthaí ceisteanna gan choinne mar thoradh ar chineál MySQL.  \< <https://www.djangoproject.com/weblog/2014/apr/21/security/>\>

#### Leaganacha difear

- \<aa80f498de6d687e613860933ac58433ab71ea4b\>Django 1.4: compromiso: (paiste)
- \<985434fb1d6bf2335bf96c6ebf91c3674f1f399f\>Django 1.5:commit: (paiste)
- \<5f0829a27e85d89ad8c433f5c6a7a7d17c9e9292\>Django 1.6: compromiso: (paiste)
- \<34526c2f56b863c2103655a0893ac801667e86ea\>Django 1.7:commit: (paiste)

### Aibreán 21, 2014 -:cve: 2014-0473

D'fhéadfadh taiscéáil leathanaigh gan ainm comhartha CSRF a nochtadh.  \< <https://www.djangoproject.com/weblog/2014/apr/21/security/>\>

#### Leaganacha difear

- \<1170f285ddd6a94a65f911a27788ba49ca08c0b0\>Django 1.4: compromiso: (paiste)
- \<6872f42757d7ef6a97e0b6ec5db4d2615d8a2bd8\>Django 1.5:commit: (paiste)
- \<d63e20942f3024f24cb8cd85a49461ba8a9b6736\>Django 1.6: compromiso: (paiste)
- \<380545bf85cbf17fc698d136815b7691f8d023ca\>Django 1.7:commit: (paiste)

### Aibreán 21, 2014 -:cve: 2014-0472

Forghníomhú cód gan choinne ag baint úsáide as reverse () .  \< <https://www.djangoproject.com/weblog/2014/apr/21/security/>\>

#### Leaganacha difear

- \<c1a8c420fe4b27fb2caf5e46d23b5712fc0ac535\>Django 1.4: compromiso: (paiste)
- \<2a5bcb69f42b84464b24b5c835dca6467b6aa7f1\>Django 1.5:commit: (paiste)
- \<4352a50871e239ebcdf64eee6f0b88e714015c1b\>Django 1.6: compromiso: (paiste)
- \<546740544d7f69254a67b06a3fc7fa0c43512958\>Django 1.7:commit: (paiste)

### Meán Fómhair 14, 2013 -:cve: 2013-1443

Diúltú seirbhíse trí phasfhocail mhóra.  \< <https://www.djangoproject.com/weblog/2013/sep/15/security/>\>

#### Leaganacha difear

- \<6903d1690a92aa040adfb0c8eb37cf62e4206714\>Django 1.4: commit: (paiste agus \<3f3d887a6844ec2db743fee64c9e53e04d39a368\>:commit: Socrú comhoiriúnachta Python) \`
- \<22b74fa09d7ccbc8c52270d648a0da7f3f0fa2bc\>Django 1.5:commit: (paiste)

### Meán Fómhair 10, 2013 -:cve: 2013-4315

Aistritheoireacht trí chlib teimpléad `ssi`.  \< <https://www.djangoproject.com/weblog/2013/sep/10/security-releases-issued/>\>

#### Leaganacha difear

- \<87d2750b39f6f2d54b7047225521a44dcd37e896\>Django 1.4: compromiso: (paiste)
- \<988b61c550d798f9a66d17ee0511fb7a9a7f33ca\>Django 1.5:commit: (paiste)

### Lúnasa 13, 2013 -:cve: 2013-6044

XSS féideartha trí scéimeanna atreoraithe URL neamhbhailíochtaithe.  \< <https://www.djangoproject.com/weblog/2013/aug/13/security-releases-issued/>\>

#### Leaganacha difear

- \<ec67af0bd609c412b76eaa4cc89968a2a8e5ad6a\>Django 1.4: compromiso: (paiste)
- \<1a274ccd6bc1afbdac80344c9b6e5810c1162b5f\>Django 1.5:commit: (paiste)

### Lúnasa 13, 2013 -:cve: 2013-4249

XSS trí riarachán ag muinín ag luachanna URLField\`.  \< <https://www.djangoproject.com/weblog/2013/aug/13/security-releases-issued/>\>

#### Leaganacha difear

- \<90363e388c61874add3f3557ee654a996ec75d78\>Django 1.5:commit: (paiste)

### Feabhra 19, 2013 -:cve: 2013-0306

Diúltú seirbhíse trí sheachbhóthar foirmset `max_num`.  \< <https://www.djangoproject.com/weblog/2013/feb/19/security/>\>

#### Leaganacha difear

- \<d7094bbce8cb838f3b40f504f198c098ff1cf727\>Django 1.3: compromiso: (paiste)
- \<0cc350a896f70ace18280410eb616a9197d862b0\>Django 1.4: compromiso: (paiste)

### Feabhra 19, 2013 -:cve: 2013-0305

Sceitheadh faisnéise trí log stair riaracháin.  \< <https://www.djangoproject.com/weblog/2013/feb/19/security/>\>

#### Leaganacha difear

- \<d3a45e10c8ac8268899999129daa27652ec0da35\>Django 1.3: compromiso: (paiste)
- \<0e7861aec73702f7933ce2a93056f7983939f0d6\>Django 1.4: compromiso: (paiste)

### 19 Feabhra, 2013 -:cve: 2013-1664 /:cve: 2013-1665

Ionsaithe bunaithe ar eintiteas i gcoinne leabharlanna Python XML.  \< <https://www.djangoproject.com/weblog/2013/feb/19/security/>\>

#### Leaganacha difear

- \<d19a27066b2247102e65412aa66917aff0091112\>Django 1.3: compromiso: (paiste)
- \<1c60d07ba23e0350351c278ad28d0bd5aa410b40\>Django 1.4: compromiso: (paiste)

### Feabhra 19, 2013 - Gan CVE

Cruasú breise ar láimhseáil ceanntásc Óst\`.  \< <https://www.djangoproject.com/weblog/2013/feb/19/security/>\>

#### Leaganacha difear

- \<27cd872e6e36a81d0bb6f5b8765a1705fecfc253\>Django 1.3: compromiso: (paiste)
- \<9936fdb11d0bbf0bd242f259bfb97bbf849d16f8\>Django 1.4: compromiso: (paiste)

### 10 Nollaig, 2012 - Uimh CVE 2

Cruasú breise ar bhailíochtú atreoraithe.  \< <https://www.djangoproject.com/weblog/2012/dec/10/security/>\>

#### Leaganacha difear

- \<1515eb46daa0897ba5ad5f0a2db8969255f1b343\>Django 1.3: :commit: (paiste)
- \<b2ae0a63aeec741f1e51bac9a95a27fd635f9652\>Django 1.4: :commit: (paiste)

### 10 Nollaig, 2012 - Uimh CVE 1

Cruasú breise ar láimhseáil ceanntásc Óst\`.  \< <https://www.djangoproject.com/weblog/2012/dec/10/security/>\>

#### Leaganacha difear

- \<2da4ace0bc1bc1d79bf43b368cb857f6f0cd6b1b\>Django 1.3: compromiso: (paiste)
- \<319627c184e71ae267d6b7f000e293168c7b6e09\>Django 1.4: compromiso: (paiste)

### Deireadh Fómhair 17, 2012 -:cve: 2012-4520

Nimhiú ceanntásc `Óst`.  \< <https://www.djangoproject.com/weblog/2012/oct/17/security/>\>

#### Leaganacha difear

- \<b45c377f8f488955e0c7069cad3f3dd21910b071\>Django 1.3: compromiso: (paiste)
- \<92d3430f12171f16f566c9050c40feefb830a4a3\>Django 1.4: compromiso: (paiste)

### 30 Iúil, 2012 -:cve: 2012-3444

Diúltú seirbhíse trí chomhaid íomhá móra.  \< <https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/>\>

#### Leaganacha difear

- \<9ca0ff6268eeff92d0d0ac2c315d4b6a8e229155\>Django 1.3: compromiso: (paiste)
- \<da33d67181b53fe6cc737ac1220153814a1509f6\>Django 1.4: compromiso: (paiste)

### 30 Iúil, 2012 -:cve: 2012-3443

Diúltú seirbhíse trí chomhaid íomhá comhbhrúite.  \< <https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/>\>

#### Leaganacha difear

- \<b2eb4787a0fff9c9993b78be5c698e85108f3446\>Django 1.3: :commit: (paiste)
- \<c14f325c4eef628bc7bfd8873c3a72aeb0219141\>Django 1.4: :commit: (paiste)

### 30 Iúil, 2012 -:cve: 2012-3442

XSS trí mhainneachtain scéim atreoraithe a bhailíochtú.  \< <https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/>\>

#### Leaganacha difear

- \<4dea4883e6c50d75f215a6b9bcbd95273f57c72d\>Django 1.3: :commit: (paiste)
- \<e34685034b60be1112160e76091e5aee60149fa1\>Django 1.4: :commit: (paiste)

### Meán Fómhair 9, 2011 -:cve: 2011-4140

CSRF féideartha trí cheanntásc Óst\`.  \< <https://www.djangoproject.com/weblog/2011/sep/09/security-releases-issued/>\>

#### Leaganacha difear

Ba chomhairleach amháin a bhí an fógra seo, mar sin níor eisíodh aon phaistí.

- Django 1.2
- Django 1.3

### Meán Fómhair 9, 2011 -:cve: 2011-4139

Nimhiú taisce ceanntásc `Óst`.  \< <https://www.djangoproject.com/weblog/2011/sep/09/security-releases-issued/>\>

#### Leaganacha difear

- \<c613af4d6485586c79d692b70a9acac429f3ca9d\>Django 1.2: compromiso: (paiste)
- \<2f7fadc38efa58ac0a8f93f936b82332a199f396\>Django 1.3: compromiso: (paiste)

### Meán Fómhair 9, 2011 -:cve: 2011-4138

Sceitheadh faisnéise/eisiúint iarratais treallach trí URLField.Verify\_Exists\`.  \< <https://www.djangoproject.com/weblog/2011/sep/09/security-releases-issued/>\>

#### Leaganacha difear

- \<7268f8af86186518821d775c530d5558fd726930\>Django 1.2: :commit: (paiste)
- \<1a76dbefdfc60e2d5954c0ba614c3d054ba9c3f0\>Django 1.3: :commit: (paiste)

### Meán Fómhair 9, 2011 -:cve: 2011-4137

Diúltú seirbhíse trí URLField.Verify\_Exists\`.  \< <https://www.djangoproject.com/weblog/2011/sep/09/security-releases-issued/>\>

#### Leaganacha difear

- \<7268f8af86186518821d775c530d5558fd726930\>Django 1.2: compromiso: (paiste)
- \<1a76dbefdfc60e2d5954c0ba614c3d054ba9c3f0\>Django 1.3: compromiso: (paiste)

### Meán Fómhair 9, 2011 -:cve: 2011-4136

Ionramháil seisiúin agus seisiún tacaíochta le cache-cuimhne á úsáid agat.  \< <https://www.djangoproject.com/weblog/2011/sep/09/security-releases-issued/>\>

#### Leaganacha difear

- \<ac7c3a110f906e4dfed3a17451bf7fd9fcb81296\>Django 1.2: compromiso: (paiste)
- \<fbe2eead2fa9d808658ca582241bcacb02618840\>Django 1.3: compromiso: (paiste)

### Feabhra 8, 2011 -:cve: 2011-0698

Traenáil stiúrthóireachta ar Windows trí láimhseáil deighilteoir cosáin mícheart.  \< <https://www.djangoproject.com/weblog/2011/feb/08/security/>\>

#### Leaganacha difear

- \<570a32a047ea56265646217264b0d3dab1a14dbd\>Django 1.1: compromiso: (paiste)
- \<194566480b15cf4e294d3f03ff587019b74044b2\>Django 1.2: compromiso: (paiste)

### Feabhra 8, 2011 -:cve: 2011-0697

XSS trí ainmneacha neamhshláintithe comhaid uaslódáilte.  \< <https://www.djangoproject.com/weblog/2011/feb/08/security/>\>

#### Leaganacha difear

- \<1966786d2dde73e17f39cf340eb33fcb5d73904e\>Django 1.1: compromiso: (paiste)
- \<1f814a9547842dcfabdae09573055984af9d3fab\>Django 1.2: compromiso: (paiste)

### Feabhra 8, 2011 -:cve: 2011-0696

CSRF trí cheanntásca brionnaithe HTTP.  \< <https://www.djangoproject.com/weblog/2011/feb/08/security/>\>

#### Leaganacha difear

- \<408c5c873ce1437c7eee9544ff279ecbad7e150a\>Django 1.1: compromiso: (paiste)
- \<818e70344e7193f6ebc73c82ed574e6ce3c91afc\>Django 1.2: compromiso: (paiste)

### 22 Nollaig, 2010 -:cve: 2010-4535

Diúltú seirbhíse i meicníocht athshocraithe pasfhocal.  \< <https://www.djangoproject.com/weblog/2010/dec/22/security/>\>

#### Leaganacha difear

- \<7f8dd9cbac074389af8d8fd235bf2cb657227b9a\>Django 1.1: compromiso: (paiste)
- \<d5d8942a160685c403d381a279e72e09de5489a9\>Django 1.2: compromiso: (paiste)

### 22 Nollaig, 2010 -:cve: 2010-4534

Sceite faisnéise i gcomhéadan riaracháin.  \< <https://www.djangoproject.com/weblog/2010/dec/22/security/>\>

#### Leaganacha difear

- \<17084839fd7e267da5729f2a27753322b9d415a0\>Django 1.1: compromiso: (paiste)
- \<85207a245bf09fdebe486b4c7bbcb65300f2a693\>Django 1.2: compromiso: (paiste)

### Meán Fómhair 8, 2010 -:cve: 2010-3082

XSS trí luach fianán neamhshábháilte a bheith iontaofa.  \< <https://www.djangoproject.com/weblog/2010/sep/08/security-release/>\>

#### Leaganacha difear

- \<7f84657b6b2243cc787bdb9f296710c8d13ad0bd\>Django 1.2: compromiso: (paiste)

### Deireadh Fómhair 9, 2009 -:cve: 2009-3695

Diúltú seirbhíse trí fheidhmíocht léirithe paiteolaíoch.  \< <https://www.djangoproject.com/weblog/2009/oct/09/security/>\>

#### Leaganacha difear

- \<594a28a9044120bed58671dde8a805c9e0f6c79a\>Django 1.0:commit: (paiste)
- \<e3e992e18b368fcd56aabafc1b5bf80a6e11b495\>Django 1.1: compromiso: (paiste)

### Iúil 28, 2009 -:cve: 2009-2659

Aistritheoireacht i láimhseálaí meán freastalaí forbartha.  \< <https://www.djangoproject.com/weblog/2009/jul/28/security/>\>

#### Leaganacha difear

- \<da85d76fd6ca846f3b0ff414e042ddb5e62e2e69\>Django 0.96: commit: (paiste)
- \<df7f917b7f51ba969faa49d000ffc79572c5dcb4\>Django 1.0:commit: (paiste)

### Meán Fómhair 2, 2008 -:cve: 2008-3909

CSRF trí shonraí POST a chaomhnú le linn logáil isteach riaracháin.  \< <https://www.djangoproject.com/weblog/2008/sep/02/security/>\>

#### Leaganacha difear

- \<44debfeaa4473bd28872c735dd3d9afde6886752\>Django 0.91: compromiso: (paiste)
- \<aee48854a164382c655acb9f18b3c06c3d238e81\>Django 0.95: commit: (paiste)
- \<7e0972bded362bc4b851c109df2c8a6548481a8e\>Django 0.96: commit: (paiste)

### Bealtaine 14, 2008 -:cve: 2008-2302

XSS trí athreorú logála isteach riaracháin.  \< <https://www.djangoproject.com/weblog/2008/may/14/security/>\>

#### Leaganacha difear

- \<6e657e2c404a96e744748209e896d8a69c15fdf2\>Django 0.91: compromiso: (paiste)
- \<50ce7fb57d79e8940ccf6e2781f2f01df029b5c5\>Django 0.95: commit: (paiste)
- \<7791e5c050cebf86d868c5dab7092185b125fdc9\>Django 0.96: commit: (paiste)

### Deireadh Fómhair 26, 2007 -:cve: 2007-5712

Diúltú seirbhíse trí cheannteideal “Glacadh le Teanga” go mór treallach.  \< <https://www.djangoproject.com/weblog/2007/oct/26/security-fix/>\>

#### Leaganacha difear

- \<8bc36e726c9e8c75c681d3ad232df8e882aaac81\>Django 0.91: compromiso: (paiste)
- \<412ed22502e11c50dbfee854627594f0e7e2c234\>Django 0.95: commit: (paiste)
- \<7dd2dd08a79e388732ce00e2b5514f15bd6d0f6f\>Django 0.96: commit: (paiste)

## Saincheisteanna roimh phróiseas slándála Django

Láimhseáladh roinnt saincheisteanna slándála sula raibh próiseas slándála foirmiúil in úsáid ag Django. Chuige seo, b'fhéidir nach n-eisíodh eisiúintí nua ag an am agus b'fhéidir nach sannadh CVanna.

### 21 Eanáir, 2007 -:cve: 2007-0405

“Caching” le feiceáil úsáideora fíordheimhnithe.  \< <https://www.djangoproject.com/weblog/2007/jan/21/0951/>\>

#### Leaganacha difear

- \<e89f0a65581f82a5740bfe989136cea75d09cd67\>Django 0.95: commit: (paiste)

### 16 Lúnasa, 2006 -:cve: 2007-0404

Saincheist bailíochtú ainm comhaid i gcreat aistriúcháin.  \< <https://www.djangoproject.com/weblog/2006/aug/16/compilemessages/>\>

#### Leaganacha difear

- \<6eefa521be3c658dc0b38f8d62d52e9801e198ab\>Django 0.90: commit: (paiste)
- \<d31e39173c29537e6a1613278c93634c18a3206e\>Django 0.91: compromiso: (paiste)
- Django 0.95:commit: (paiste) (eisithe 21 E \<a132d411c6986418ee6c0edc331080aa792fee6e\>anáir 2007)