Cartlann saincheisteanna slándálaLink to this heading
Tá foireann forbartha Django tiomanta go láidir do thuairisciú agus nochtadh freagrach ar shaincheisteanna a bhaineann le slándáil, mar a leagtar amach in:doc: `Polasaithe slándála </internals/security> Django'.
Mar chuid den tiomantas sin, coinnímid an liosta stairiúil seo a leanas de shaincheisteanna a shocraíodh agus a nochtadh. < https://en.wikipedia.org/wiki/Common_Vulnerabilities_and_Exposures>I gcás gach eisiúint, cuimsíonn an liosta thíos an dáta, cur síos gairid, an `aitheantóir CVE`_ más infheidhme, liosta de na leaganacha atá buailte, nasc leis an nochtadh iomlán agus naisc chuig an bpaiste/paistí cuí.
Baineann roinnt rabhadh tábhachtacha leis an bhfaisnéis seo:
Ní chuimsíonn liostaí de na leaganacha atá buailte ach na leaganacha sin de Django a raibh eisiúintí cobhsaí le tacaíocht slándála ag am na nochtadh. Ciallaíonn sé seo go bhféadfadh go mbeadh tionchar ag leaganacha níos sine (a raibh a dtacaíocht slándála in éag) agus ar leaganacha a bhí i stáit réamh-scaoilte (alpha/beta/RC) tráth na nochtadh, ach nach bhfuil liostaithe orthu.
D'eisigh tionscadal Django comhairleanna slándála uaireanta, ag cur in iúl fadhbanna slándála féideartha a d'fhéadfadh teacht chun cinn ó chumraíocht mhíchuí nó ó shaincheisteanna eile lasmuigh de Tá CVEanna faighte ag cuid de na comhairleachtaí seo; nuair is amhlaidh, tá siad liostaithe anseo, ach toisc nach bhfuil aon phaistí nó eisiúintí a ghabhann leo, ní liostófar ach an tuairisc, an nochtadh agus an CVE.
Saincheisteanna faoi phróiseas slándála DjangoLink to this heading
Láimhseáladh gach saincheist slándála faoi leaganacha de phróiseas slándála Django. Tá siad seo liostaithe thíos.
August 4, 2026 - CVE 2026-15307Link to this heading
Server-side file-write and request forgery via spatial lookups. Full description
August 4, 2026 - CVE 2026-15337Link to this heading
Potential denial-of-service vulnerability in check_for_language().
Full description
August 4, 2026 - CVE 2026-15830Link to this heading
Potential denial-of-service vulnerability via nested geometry collections. Full description
August 4, 2026 - CVE 2026-15920Link to this heading
Potential cross-site scripting via URLField values in the admin.
Full description
July 7, 2026 - CVE 2026-48588Link to this heading
Potential exposure of private data via cached Set-Cookie response.
Full description
July 7, 2026 - CVE 2026-53877Link to this heading
Heap buffer over-read in GDALRaster.
Full description
July 7, 2026 - CVE 2026-53878Link to this heading
Header injection possibility since DomainNameValidator accepted newlines in
input.
Full description
June 3, 2026 - CVE 2026-6873Link to this heading
Signed cookie salt namespace collision in
django.http.HttpRequest.get_signed_cookie.
Full description
June 3, 2026 - CVE 2026-7666Link to this heading
Potential unencrypted email transmission via STARTTLS in the SMTP backend.
Full description
June 3, 2026 - CVE 2026-8404Link to this heading
Potential exposure of private data via case-sensitive Cache-Control
directives in UpdateCacheMiddleware.
Full description
June 3, 2026 - CVE 2026-35193Link to this heading
Potential exposure of private data via missing Vary: Authorization in
UpdateCacheMiddleware.
Full description
June 3, 2026 - CVE 2026-48587Link to this heading
Potential exposure of private data via whitespace padding in Vary header.
Full description
May 5, 2026 - CVE 2026-5766Link to this heading
Potential denial-of-service vulnerability in ASGI requests via file upload limit bypass. Full description
May 5, 2026 - CVE 2026-35192Link to this heading
Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST.
Full description
May 5, 2026 - CVE 2026-6907Link to this heading
Potential exposure of private data due to incorrect handling of Vary: * in
UpdateCacheMiddleware.
Full description
April 7, 2026 - CVE 2026-3902Link to this heading
ASGI header spoofing via underscore/hyphen conflation. Full description
April 7, 2026 - CVE 2026-4277Link to this heading
Privilege abuse in GenericInlineModelAdmin.
Full description
April 7, 2026 - CVE 2026-4292Link to this heading
Privilege abuse in ModelAdmin.list_editable.
Full description
April 7, 2026 - CVE 2026-33033Link to this heading
Potential denial-of-service vulnerability in MultiPartParser via
base64-encoded file upload.
Full description
April 7, 2026 - CVE 2026-33034Link to this heading
Potential denial-of-service vulnerability in ASGI requests via memory upload limit bypass. Full description
March 3, 2026 - CVE 2026-25673Link to this heading
Potential denial-of-service vulnerability in URLField via Unicode
normalization on Windows.
Full description
March 3, 2026 - CVE 2026-25674Link to this heading
Potential incorrect permissions on newly created file system objects. Full description
February 3, 2026 - CVE 2025-13473Link to this heading
Username enumeration through timing difference in mod_wsgi authentication handler. Full description
February 3, 2026 - CVE 2025-14550Link to this heading
Potential denial-of-service vulnerability via repeated headers when using ASGI. Full description
February 3, 2026 - CVE 2026-1207Link to this heading
Potential SQL injection via raster lookups on PostGIS. Full description
February 3, 2026 - CVE 2026-1285Link to this heading
Potential denial-of-service vulnerability in django.utils.text.Truncator
HTML methods.
Full description
February 3, 2026 - CVE 2026-1287Link to this heading
Potential SQL injection in column aliases via control characters. Full description
February 3, 2026 - CVE 2026-1312Link to this heading
Potential SQL injection via QuerySet.order_by and FilteredRelation.
Full description
December 2, 2025 - CVE 2025-13372Link to this heading
Potential SQL injection in FilteredRelation column aliases on PostgreSQL.
Full description
December 2, 2025 - CVE 2025-64460Link to this heading
Potential denial-of-service vulnerability in XML serializer text extraction. Full description
November 5, 2025 - CVE 2025-64458Link to this heading
Potential denial-of-service vulnerability in HttpResponseRedirect and
HttpResponsePermanentRedirect on Windows. Full description
November 5, 2025 - CVE 2025-64459Link to this heading
Potential SQL injection via _connector keyword argument in QuerySet and
Q objects. Full description
October 1, 2025 - CVE 2025-59681Link to this heading
Potential SQL injection in QuerySet.annotate(), alias(),
aggregate(), and extra() on MySQL and MariaDB. Full description
October 1, 2025 - CVE 2025-59682Link to this heading
Potential partial directory-traversal via archive.extract().
Full description
September 3, 2025 - CVE 2025-57833Link to this heading
Potential SQL injection in FilteredRelation column aliases.
Full description
June 4, 2025 - CVE 2025-48432Link to this heading
Potential log injection via unescaped request path. Full description
There was an additional hardening with new patch releases published on June 10, 2025. Full description
May 7, 2025 - CVE 2025-32873Link to this heading
Denial-of-service possibility in strip_tags().
Full description
April 2, 2025 - CVE 2025-27556Link to this heading
Potential denial-of-service vulnerability in LoginView, LogoutView, and
set_language() on Windows. Full description
March 6, 2025 - CVE 2025-26699Link to this heading
Potential denial-of-service in django.utils.text.wrap().
Full description
January 14, 2025 - CVE 2024-56374Link to this heading
Potential denial-of-service vulnerability in IPv6 validation. Full description
4 Nollaig, 2024 -:cve: 2024-53907Link to this heading
Diúltú seirbhíse féideartha i ``django.utils.html.strip_tags () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/dec/04/security-releases/>
<bbc74a7f7eb7335e913bdb4787f22e83a9be947e>Django 5.1: compromiso: (paiste)
<a5a89ea28cc550c1b29b03f9e14ef3c128ec1e84>Django 5.0: compromiso: (paiste)
<790eb058b0716c536a2f2e8d1c6d5079d776c22b>Django 4.2: compromiso: (paiste)
4 Nollaig, 2024 -:cve: 2024-53908Link to this heading
Instealladh SQL féideartha i ``Haskey (lhs, rhs) ``ar Oracle. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/dec/04/security-releases/>
<6943d61818e63e77b65d8b1ae65941e8f04bd87b>Django 5.1: compromiso: (paiste)
<ff08bb6c70aa45f83a5ef3bd0b601c7c9d1a7642>Django 5.0: compromiso: (paiste)
<7376bcbf508883282ffcc0f0fac5cf0ed2d6cbc5>Django 4.2: compromiso: (paiste)
Meán Fómhair 3, 2024 -:cve: 2024-45231Link to this heading
Áireamh ríomhphoist úsáideora féideartha trí stádas freagartha ar athshocrú pasfhocal. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/sep/03/security-releases/>
<3c733c78d6f8e50296d6e248968b6516c92a53ca>Django 5.1: compromiso: (paiste)
<96d84047715ea1715b4bd1594e46122b8a77b9e2>Django 5.0: compromiso: (paiste)
<bf4888d317ba4506d091eeac6e8b4f1fcc731199>Django 4.2: compromiso: (paiste)
Meán Fómhair 3, 2024 -:cve: 2024-45230Link to this heading
Leochaileacht féideartha a dhiúltú seirbhíse i ``django.utils.html.urlize () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/sep/03/security-releases/>
<022ab0a75c76ab2ea31dfcc5f2cf5501e378d397>Django 5.1: compromiso: (paiste)
<813de2672bd7361e9a453ab62cd6e52f96b6525b>Django 5.0: compromiso: (paiste)
<d147a8ebbdf28c17cafbbe2884f0bc57e2bf82e2>Django 4.2: compromiso: (paiste)
6 Lúnasa, 2024 -:cve: 2024-42005Link to this heading
Instealladh SQL féideartha i QuerySet.values () ``agus ``values_list (). `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/aug/06/security-releases/>
<32ebcbf2e1fe3e5ba79a6554a167efce81f7422d>Django 5.0: compromiso: (paiste)
<f4af67b9b41e0f4c117a8741da3abbd1c869ab28>Django 4.2: compromiso: (paiste)
6 Lúnasa, 2024 -:cve: 2024-41991Link to this heading
Leochaileacht féideartha a dhiúltú seirbhíse i django.utils.html.urlize () ``agus ``adminURLFieldWidget. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/aug/06/security-releases/>
<523da8771bce321023f490f70d71a9e973ddc927>Django 5.0: compromiso: (paiste)
<efea1ef7e2190e3f77ca0651b5458297bc0f6a9f>Django 4.2: compromiso: (paiste)
6 Lúnasa, 2024 -:cve: 2024-41990Link to this heading
Leochaileacht féideartha a dhiúltú seirbhíse i ``django.utils.html.urlize () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/aug/06/security-releases/>
<7b7b909579c8311c140c89b8a9431bf537febf93>Django 5.0: compromiso: (paiste)
<d0a82e26a74940bf0c78204933c3bdd6a283eb88>Django 4.2: compromiso: (paiste)
6 Lúnasa, 2024 -:cve: 2024-41989Link to this heading
Ídiú cuimhne féideartha i ``django.utils.numberformat.floatformat () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/aug/06/security-releases/>
<27900fe56f3d3cabb4aeb6ccb82f92bab29073a8>Django 5.0: compromiso: (paiste)
<fc76660f589ac07e45e9cd34ccb8087aeb11904b>Django 4.2: compromiso: (paiste)
9 Iúil, 2024 -:cve: 2024-39614Link to this heading
Diúltú seirbhíse féideartha i ``django.utils.translation.get_supported_language_variant () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/jul/09/security-releases/>
<8e7a44e4bec0f11474699c3111a5e0a45afe7f49>Django 5.0: compromiso: (paiste)
<17358fb35fb7217423d4c4877ccb6d1a3a40b1c3>Django 4.2: compromiso: (paiste)
9 Iúil, 2024 -: cve: 2024-39330Link to this heading
Tarraingt stiúrthóireachta féideartha i ``django.core.files.storage.storage.save () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/jul/09/security-releases/>
<9f4f63e9ebb7bf6cb9547ee4e2526b9b96703270>Django 5.0: compromiso: (paiste)
<2b00edc0151a660d1eb86da4059904a0fc4e095e>Django 4.2: compromiso: (paiste)
9 Iúil, 2024 -: cve: 2024-39329Link to this heading
Áireamh ainm úsáideora trí dhifríocht uainiúcháin d'úsáideoirí a bhfuil pasfhocail neamhú `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/jul/09/security-releases/>
<07cefdee4a9d1fcd9a3a631cbd07c78defd1923b>Django 5.0: compromiso: (paiste)
<156d3186c96e3ec2ca73b8b25dc2ef366e38df14>Django 4.2: compromiso: (paiste)
9 Iúil, 2024 -: cve: 2024-38875Link to this heading
Diúltú seirbhíse féideartha i ``django.utils.html.urlize () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/jul/09/security-releases/>
<7285644640f085f41d60ab0c8ae4e9153f0485db>Django 5.0: compromiso: (paiste)
<79f368764295df109a37192f6182fb6f361d85b5>Django 4.2: compromiso: (paiste)
4 Márta, 2024 -: cve: 2024-27351Link to this heading
Léiriú rialta féideartha diúltú seirbhíse i ``Django.utils.text.truncator.words () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/mar/04/security-releases/>
<3394fc6132436eca89e997083bae9985fb7e761e>Django 5.0: compromiso: (paiste)
<3c9a2771cc80821e041b16eb36c1c37af5349d4a>Django 4.2: compromiso: (paiste)
<072963e4c4d0b3a7a8c5412bc0c7d27d1a9c3521>Django 3.2: compromiso: (paiste)
Feabhra 6, 2024 -:cve: 2024-24680Link to this heading
Diúltú seirbhíse féideartha i scagaire teimpléad ``intcomma`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2024/feb/06/security-releases/>
<16a8fe18a3b81250f4fa57e3f93f0599dc4895bc>Django 5.0: compromiso: (paiste)
<572ea07e84b38ea8de0551f4b4eda685d91d09d2>Django 4.2: compromiso: (paiste)
<c1171ffbd570db90ca206c30f8e2b9f691243820>Django 3.2: compromiso: (paiste)
1 Samhain, 2023 -:cve: 2023-46695Link to this heading
Diúltú féideartha leochaileacht seirbhíse i ``ÚsáideorainmField` ar Windows. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2023/nov/01/security-releases/>
<048a9ebb6ea468426cb4e57c71572cbbd975517f>Django 4.2: compromiso: (paiste)
<4965bfdde2e5a5c883685019e57d123a3368a75e>Django 4.1: compromiso: (paiste)
<f9a7fb8466a7ba4857eaf930099b5258f3eafb2b>Django 3.2: compromiso: (paiste)
Deireadh Fómhair 4, 2023 -:cve: 2023-43665Link to this heading
Féidearthacht diúltú seirbhíse i Django.Utils.Text.Truncator. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2023/oct/04/security-releases/>
<be9c27c4d18c2e6a5be8af4e53c0797440794473>Django 4.2: compromiso: (paiste)
<c7b7024742250414e426ad49fb80db943e7ba4e8>Django 4.1: compromiso: (paiste)
<ccdade1a0262537868d7ca64374de3d957ca50c5>Django 3.2: compromiso: (paiste)
Meán Fómhair 4, 2023 -:cve: 2023-41164Link to this heading
Diúltú féideartha leochaileacht seirbhíse i ``django.utils.encoding.uri_to_iri () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2023/sep/04/security-releases/>
<9c51b4dcfa0cefcb48231f4d71cafa80821f87b9>Django 4.2: compromiso: (paiste)
<ba00bc5ec6a7eff5e08be438f7b5b0e9574e8ff0>Django 4.1: compromiso: (paiste)
<6f030b1149bd8fa4ba90452e77cb3edc095ce54e>Django 3.2: compromiso: (paiste)
3 Iúil, 2023 -:cve: 2023-36053Link to this heading
Diúltú léirithe rialta féideartha ar leochaileacht seirbhíse i EmailValidator/URLValidator`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2023/jul/03/security-releases/>
<b7c5feb35a31799de6e582ad6a5a91a9de74e0f9>Django 4.2: compromiso: (paiste)
<beb3f3d55940d9aa7198bf9d424ab74e873aec3d>Django 4.1: compromiso: (paiste)
<454f2fb93437f98917283336201b4048293f7582>Django 3.2: compromiso: (paiste)
Bealtaine 3, 2023 -:cve: 2023-31047Link to this heading
Seachbhóthar féideartha bailíochtaithe agus comhad iolracha á uaslódáil ag baint úsáide `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2023/may/03/security-releases/>
<21b1b1fc03e5f9e9f8c977ee6e35618dd3b353dd>Django 4.2: compromiso: (paiste)
<e7c3a2ccc3a562328600be05068ed9149e12ce64>Django 4.1: compromiso: (paiste)
<eed53d0011622e70b936e203005f0e6f4ac48965>Django 3.2: compromiso: (paiste)
14 Feabhra, 2023 -:cve: 2023-24580Link to this heading
Leochaileacht féideartha seirbhíse a dhiúltú in uaslódáiltí `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2023/feb/14/security-releases/>
<628b33a854a9c68ec8a0c51f382f304a0044ec92>Django 4.1: compromiso: (paiste)
<83f1ea83e4553e211c1c5a0dfc197b66d4e50432>Django 4.0:commit: (paiste)
<a665ed5179f5bbd3db95ce67286d0192eff041d8>Django 3.2: compromiso: (paiste)
1 Feabhra, 2023 -:cve: 2023-23969Link to this heading
Seirbhís a dhiúltú féideartha trí cheanntásca ``Accept-Teanga ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2023/feb/01/security-releases/>
<9d7bd5a56b1ce0576e8e07a8001373576d277942>Django 4.1: compromiso: (paiste)
<4452642f193533e288a52c02efb5bbc766a68f95>Django 4.0:commit: (paiste)
<c7e0151fdf33e1b11d488b6f67b94fdf3a30614a>Django 3.2: compromiso: (paiste)
Deireadh Fómhair 4, 2022 -:cve: 2022-41323Link to this heading
Leochaileacht féideartha seirbhíse a dhiúltú in URLanna idirnáisiúnta. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2022/oct/04/security-releases/>
<9d656ea51d9ea7105c0c0785783ac29d426a7d25>Django 4.1: compromiso: (paiste)
<23f0093125ac2e553da6c1b2f9988eb6a3dd2ea1>Django 4.0:commit: (paiste)
<5b6b257fa7ec37ff27965358800c67e2dd11c924>Django 3.2: compromiso: (paiste)
3 Lúnasa, 2022 -:cve: 2022-36359Link to this heading
Leochaileacht ionchasach íoslódála comhaid léirithe i FileResponse `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2022/aug/03/security-releases/>
<b7d9529cbe0af4adabb6ea5d01ed8dcce3668fb3>Django 4.0:commit: (paiste)
<b3e4494d759202a3b6bf247fd34455bf13be5b80>Django 3.2: compromiso: (paiste)
4 Iúil, 2022 -:cve: 2022-34265Link to this heading
Instealladh SQL féideartha trí argóintí Trunc (cineál) ``agus ``Extract (lookup_name). `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2022/jul/04/security-releases/>
<0dc9c016fadb71a067e5a42be30164e3f96c0492>Django 4.0:commit: (paiste)
<a9010fe5555e6086a9d9ae50069579400ef0685e>Django 3.2: compromiso: (paiste)
Aibreán 11, 2022 -:cve: 2022-28346Link to this heading
Instealladh SQL féideartha i QuerySet.annotate () ``, `comhiomlán (), agus ``extra () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2022/apr/11/security-releases/>
<800828887a0509ad1162d6d407e94d8de7eafc60>Django 4.0:commit: (paiste)
<2044dac5c6968441be6f534c4139bcf48c5c7e48>Django 3.2: compromiso: (paiste)
<2c09e68ec911919360d5f8502cefc312f9e03c5d>Django 2.2:compromiso: (paiste)
Aibreán 11, 2022 -:cve: 2022-28347Link to this heading
Instealladh SQL féideartha trí ``QuerySet.Explain (** roghanna) ``ar PostgreSQL. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2022/apr/11/security-releases/>
<00b0fc50e1738c7174c495464a5ef069408a4402>Django 4.0:commit: (paiste)
<9e19accb6e0a00ba77d5a95a91675bf18877c72d>Django 3.2: compromiso: (paiste)
<29a6c98b4c13af82064f993f0acc6e8fafa4d3f5>Django 2.2:compromiso: (paiste)
1 Feabhra, 2022 -:cve: 2022-22818Link to this heading
XSS féideartha trí chlib teimpléad {% debug%}. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2022/feb/01/security-releases/>
Leaganacha difearLink to this heading
<01422046065d2b51f8f613409cad2c81b39487e5>Django 4.0:commit: (paiste)
<1a1e8278c46418bde24c86a65443b0674bae65e2>Django 3.2: compromiso: (paiste)
<c27a7eb9f40b64990398978152e62b6ff839c2e6>Django 2.2:compromiso: (paiste)
1 Feabhra, 2022 -:cve: 2022-23833Link to this heading
Féidearthacht seirbhíse a dhiúltú in uaslódálacha comhad. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2022/feb/01/security-releases/>
Leaganacha difearLink to this heading
<f9c7d48fdd6f198a6494a9202f90242f176e4fc9>Django 4.0:commit: (paiste)
<d16133568ef9c9b42cb7a08bdf9ff3feec2e5468>Django 3.2: compromiso: (paiste)
<c477b761804984c932704554ad35f78a2e230c6a>Django 2.2:compromiso: (paiste)
4 Eanáir, 2022 -:cve: 2021-45452Link to this heading
Aistritheoireacht féideartha trí ``Storage.save () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>
Leaganacha difearLink to this heading
<e1592e0f26302e79856cc7f2218ae848ae19b0f6>Django 4.0:commit: (paiste)
<8d2f7cff76200cbd2337b2cf1707e383eb1fb54b>Django 3.2: compromiso: (paiste)
<4cb35b384ceef52123fc66411a73c36a706825e1>Django 2.2:compromiso: (paiste)
4 Eanáir, 2022 -:cve: 2021-45116Link to this heading
Nochtadh faisnéise féideartha i scagaire teimpléad dictsort. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>
Leaganacha difearLink to this heading
<2a8ec7f546d6d5806e221ec948c5146b55bd7489>Django 4.0:commit: (paiste)
<c7fe895bca06daf12cc1670b56eaf72a1ef27a16>Django 3.2: compromiso: (paiste)
<c9f648ccfac5ab90fb2829a66da4f77e68c7f93a>Django 2.2:compromiso: (paiste)
4 Eanáir, 2022 -:cve: 2021-45115Link to this heading
Féidearthacht seirbhíse a dhiúltú i UserAttributeSimilarityValidator. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2022/jan/04/security-releases/>
Leaganacha difearLink to this heading
<df79ef03ac867c93caaa6be56bc69e66abfeef8f>Django 4.0:commit: (paiste)
<a8b32fe13bcaed1c0b772fdc53de84abc224fb20>Django 3.2: compromiso: (paiste)
<2135637fdd5ce994de110affef9e67dffdf77277>Django 2.2:compromiso: (paiste)
7 Nollaig, 2021 -:cve: 2021-44420Link to this heading
Seachbhóthar féideartha rialú rochtana suas srutha bunaithe ar chosáin URL. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2021/dec/07/security-releases/>
Leaganacha difearLink to this heading
<333c65603032c377e682cdbd7388657a5463a05a>Django 3.2: compromiso: (paiste)
<22bd17488159601bf0741b70ae7932bffea8eced>Django 3.1: compromiso: (paiste)
<7cf7d74e8a754446eeb85cacf2fef1247e0cb6d7>Django 2.2:compromiso: (paiste)
1 Iúil, 2021 -:cve: 2021-35042Link to this heading
Instealladh SQL féideartha trí ionchur ``QuerySet.order_by () `neamhshláintithe. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2021/jul/01/security-releases/>
Leaganacha difearLink to this heading
<a34a5f724c5d5adb2109374ba3989ebb7b11f81f>Django 3.2: compromiso: (paiste)
<0bd57a879a0d54920bb9038a732645fb917040e9>Django 3.1: compromiso: (paiste)
2 Meitheamh, 2021 -:cve: 2021-33203Link to this heading
Aistriú eolaire féideartha trí admindocs`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2021/jun/02/security-releases/>
Leaganacha difearLink to this heading
<dfaba12cda060b8b292ae1d271b44bf810b1c5b9>Django 3.2: compromiso: (paiste)
<20c67a0693c4ede2b09af02574823485e82e4c8f>Django 3.1: compromiso: (paiste)
<053cc9534d174dc89daba36724ed2dcb36755b90>Django 2.2:compromiso: (paiste)
2 Meitheamh, 2021 -:cve: 2021-33571Link to this heading
Ionsaithe neamhchinnte féideartha SSRF, RFI, agus LFI ó ghlac bailíochtóirí le nialas tosaigh i seoltaí IPv4. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2021/jun/02/security-releases/>
Leaganacha difearLink to this heading
<9f75e2e562fa0c0482f3dde6fc7399a9070b4a3d>Django 3.2: compromiso: (paiste)
<203d4ab9ebcd72fc4d6eb7398e66ed9e474e118e>Django 3.1: compromiso: (paiste)
<f27c38ab5d90f68c9dd60cabef248a570c0be8fc>Django 2.2:compromiso: (paiste)
Bealtaine 6, 2021 -:cve: 2021-32052Link to this heading
Féidearthacht insteallta ceanntásc ós rud é gur ghlac `URLValidator ``le línte nua san ionchur ar Python 3.9.5 +. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2021/may/06/security-releases/>
Leaganacha difearLink to this heading
<2d2c1d0c97832860fbd6597977e2aae17dd7e5b2>Django 3.2: compromiso: (paiste)
<afb23f5929944a407e4990edef1c7806a94c9879>Django 3.1: compromiso: (paiste)
<d9594c4ea57b6309d93879805302cec9ae9f23ff>Django 2.2:compromiso: (paiste)
Bealtaine 4, 2021 -:cve: 2021-31542Link to this heading
Aistritheoireacht féideartha trí chomhaid uaslódáilte `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2021/may/04/security-releases/>
Leaganacha difearLink to this heading
<c98f446c188596d4ba6de71d1b77b4a6c5c2a007>Django 3.2: compromiso: (paiste)
<25d84d64122c15050a0ee739e859f22ddab5ac48>Django 3.1: compromiso: (paiste)
<04ac1624bdc2fa737188401757cf95ced122d26d>Django 2.2:compromiso: (paiste)
Aibreán 6, 2021 -:cve: 2021-28658Link to this heading
Aistritheoireacht féideartha trí chomhaid uaslódáilte `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2021/apr/06/security-releases/>
Leaganacha difearLink to this heading
<2820fd1be5dfccbf1216c3845fad8580502473e1>Django 3.2: compromiso: (paiste)
<cca0d98118cccf9ae0c6dcf2d6c57fc50469fbf0>Django 3.1: compromiso: (paiste)
<e7fba62248f604c76da4f23dcf1db4a57b0808ea>Django 3.0:commit: (paiste)
<4036d62bda0e9e9f6172943794b744a454ca49c2>Django 2.2:compromiso: (paiste)
Feabhra 19, 2021 -:cve: 2021-23336Link to this heading
Nimhiú taisce gréasáin trí ``django.utils.http.limited_parse_qsl () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2021/feb/19/security-releases/>
Leaganacha difearLink to this heading
<be8237c7cce24b06aabde0b97afce98ddabbe3b6>Django 3.2: compromiso: (paiste)
<8f6d431b08cbb418d9144b976e7b972546607851>Django 3.1: compromiso: (paiste)
<326a926beef869d3341bc9ef737887f0449b6b71>Django 3.0:commit: (paiste)
<fd6b6afd5959b638c62dbf4839ccff97e7f7dfda>Django 2.2:compromiso: (paiste)
Feabhra 1, 2021 -:cve: 2021-3281Link to this heading
Aistriú féideartha stiúrthóireachta trí archive.extract () `. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2021/feb/01/security-releases/>
Leaganacha difearLink to this heading
<02e6592835b4559909aa3aaaf67988fef435f624>Django 3.1: compromiso: (paiste)
<52e409ed17287e9aabda847b6afe58be2fa9f86a>Django 3.0:commit: (paiste)
<21e7622dec1f8612c85c2fc37fe8efbfd3311e37>Django 2.2:compromiso: (paiste)
Meán Fómhair 1, 2020 -:cve: 2020-24584Link to this heading
Méadú ceada in eolairí idirleibhéil taisce an chórais chomhaid ar Python 3.7+. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2020/sep/01/security-releases/>
Leaganacha difearLink to this heading
<2b099caa5923afa8cfb5f1e8c0d56b6e0e81915b>Django 3.1: compromiso: (paiste)
<cdb367c92a0ba72ddc0cbd13ff42b0e6df709554>Django 3.0:commit: (paiste)
<a3aebfdc8153dc230686b6d2454ccd32ed4c9e6f>Django 2.2:compromiso: (paiste)
Meán Fómhair 1, 2020 -:cve: 2020-24583Link to this heading
Ceadanna míchearta ar eolairí idirleibhéil ar Python 3.7+. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2020/sep/01/security-releases/>
Leaganacha difearLink to this heading
<934430d22aa5d90c2ba33495ff69a6a1d997d584>Django 3.1: compromiso: (paiste)
<08892bffd275c79ee1f8f67639eb170aaaf1181e>Django 3.0:commit: (paiste)
<375657a71c889c588f723469bd868bd1d40c369f>Django 2.2:compromiso: (paiste)
3 Meitheamh, 2020 -:cve: 2020-13596Link to this heading
XSS féideartha trí admin ForeignKeyWidget. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2020/jun/03/security-releases/>
Leaganacha difearLink to this heading
<1f2dd37f6fcefdd10ed44cb233b2e62b520afb38>Django 3.0:commit: (paiste)
<6d61860b22875f358fac83d903dc629897934815>Django 2.2:compromiso: (paiste)
3 Meitheamh, 2020 -:cve: 2020-13254Link to this heading
Sceitheadh sonraí féideartha trí eochracha memcached míchfhoirmithe. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2020/jun/03/security-releases/>
Leaganacha difearLink to this heading
<84b2da5552e100ae3294f564f6c862fef8d0e693>Django 3.0:commit: (paiste)
<07e59caa02831c4569bbebb9eb773bdd9cb4b206>Django 2.2:compromiso: (paiste)
4 Márta, 2020 -:cve: 2020-9402Link to this heading
Instealladh SQL féideartha trí pharaiméadar “lamháltas” i bhfeidhmeanna agus comhiomlánaithe GIS ar Oracle. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2020/mar/04/security-releases/>
Leaganacha difearLink to this heading
<26a5cf834526e291db00385dd33d319b8271fc4c>Django 3.0:commit: (paiste)
<fe886a3b58a93cfbe8864b485f93cb6d426cd1f2>Django 2.2:compromiso: (paiste)
<02d97f3c9a88adc890047996e5606180bd1c6166>Django 1.11: commit: (paiste)
Feabhra 3, 2020 -:cve: 2020-7471Link to this heading
Instealladh SQL féideartha trí ``StringaGg (teorannaitheoir) ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2020/feb/03/security-releases/>
Leaganacha difearLink to this heading
<505826b469b16ab36693360da9e11fd13213421b>Django 3.0:commit: (paiste)
<c67a368c16e4680b324b4f385398d638db4d8147>Django 2.2:compromiso: (paiste)
<001b0634cd309e372edb6d7d95d083d02b8e37bd>Django 1.11: commit: (paiste)
18 Nollaig, 2019 -:cve: 2019-19844Link to this heading
Fuadach cuntas féideartha trí fhoirm athshocraithe pasfhocal. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2019/dec/18/security-releases/>
Leaganacha difearLink to this heading
<302a4ff1e8b1c798aab97673909c7a3dfda42c26>Django 3.0:commit: (paiste)
<4d334bea06cac63dc1272abcec545b85136cca0e>Django 2.2:compromiso: (paiste)
<f4cff43bf921fcea6a29b726eb66767f67753fa2>Django 1.11: commit: (paiste)
2 Nollaig, 2019 -:cve: 2019-19118Link to this heading
Méadú pribhléid i riarachán Django. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2019/dec/02/security-releases/>
Leaganacha difearLink to this heading
<092cd66cf3c3e175acce698d6ca2012068d878fa>Django 3.0:commit: (paiste)
<36f580a17f0b3cb087deadf3b65eea024f479c21>Django 2.2:compromiso: (paiste)
<103ebe2b5ff1b2614b85a52c239f471904d26244>Django 2.1: compromiso: (paiste)
1 Lúnasa, 2019 -:cve: 2019-14235Link to this heading
Ídiú cuimhne féideartha i ``django.utils.encoding.uri_to_iri () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2019/aug/01/security-releases/>
Leaganacha difearLink to this heading
<cf694e6852b0da7799f8b53f1fb2f7d20cf17534>Django 2.2:compromiso: (paiste)
<5d50a2e5fa36ad23ab532fc54cf4073de84b3306>Django 2.1: compromiso: (paiste)
<869b34e9b3be3a4cfcb3a145f218ffd3f5e3fd79>Django 1.11: commit: (paiste)
1 Lúnasa, 2019 -:cve: 2019-14234Link to this heading
Féidearthacht insteallta SQL i gcuardach eochair agus innéacs do JSONField/hStorefield. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2019/aug/01/security-releases/>
Leaganacha difearLink to this heading
<4f5b58f5cd3c57fee9972ab074f8dc6895d8f387>Django 2.2:compromiso: (paiste)
<f74b3ae3628c26e1b4f8db3d13a91d52a833a975>Django 2.1: compromiso: (paiste)
<ed682a24fca774818542757651bfba576c3fc3ef>Django 1.11: commit: (paiste)
1 Lúnasa, 2019 -:cve: 2019-14233Link to this heading
Féidearthacht seirbhíse a dhiúltú i strip_tags () `. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2019/aug/01/security-releases/>
Leaganacha difearLink to this heading
<e34f3c0e9ee5fc9022428fe91640638bafd4cda7>Django 2.2:compromiso: (paiste)
<5ff8e791148bd451180124d76a55cb2b2b9556eb>Django 2.1: compromiso: (paiste)
<52479acce792ad80bb0f915f20b835f919993c72>Django 1.11: commit: (paiste)
1 Lúnasa, 2019 -:cve: 2019-14232Link to this heading
Féidearthacht diúltú seirbhíse i Django.Utils.Text.Truncator. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2019/aug/01/security-releases/>
Leaganacha difearLink to this heading
<c3289717c6f21a8cf23daff1c78c0c014b94041f>Django 2.2:compromiso: (paiste)
<c23723a1551340cc7d3126f04fcfd178fa224193>Django 2.1: compromiso: (paiste)
<42a66e969023c00536256469f0e8b8a099ef109d>Django 1.11: commit: (paiste)
1 Iúil, 2019 -:cve: 2019-12781Link to this heading
Braite HTTP mícheart le seachfhreastalaí droim ag nascadh trí HTTPS. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2019/jul/01/security-releases/>
Leaganacha difearLink to this heading
<77706a3e4766da5d5fb75c4db22a0a59a28e6cd6>Django 2.2:compromiso: (paiste)
<1e40f427bb8d0fb37cc9f830096a97c36c97af6f>Django 2.1: compromiso: (paiste)
<32124fc41e75074141b05f10fc55a4f01ff7f050>Django 1.11: commit: (paiste)
3 Meitheamh, 2019 -:cve: 2019-12308Link to this heading
XSS trí nasc “URL reatha” a ghineann adminURLFieldWidget. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2019/jun/03/security-releases/>
Leaganacha difearLink to this heading
<afddabf8428ddc89a332f7a78d0d21eaf2b5a673>Django 2.2:compromiso: (paiste)
<09186a13d975de6d049f8b3e05484f66b01ece62>Django 2.1: compromiso: (paiste)
<c238701859a52d584f349cce15d56c8e8137c52b>Django 1.11: commit: (paiste)
3 Meitheamh, 2019 -:cve: 2019-11358Link to this heading
Truailliú fréamhshamhail i jQuery cuacail. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2019/jun/03/security-releases/>
Leaganacha difearLink to this heading
<baaf187a4e354bf3976c51e2c83a0d2f8ee6e6ad>Django 2.2:compromiso: (paiste)
<95649bc08547a878cebfa1d019edec8cb1b80829>Django 2.1: compromiso: (paiste)
11 Feabhra, 2019 -:cve: 2019-6975Link to this heading
Ídiú cuimhne i ``django.utils.numberformat.format () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2019/feb/11/security-releases/>
Leaganacha difearLink to this heading
<40cd19055773705301c3428ed5e08a036d2091f3>Django 2.1: compromiso: (paiste)
<392e040647403fc8007708d52ce01d915b014849>Django 2.0:commit: (paiste agus <1f42f82566c9d2d73aff1c42790d6b1b243f7676>:commit: `ceartú) `
<0bbb560183fabf0533289700845dafa94951f227>Django 1.11: commit: (paiste)
4 Eanáir, 2019 -:cve: 2019-3498Link to this heading
Féidearthacht spoofing ábhair sa leathanach réamhshocraithe 404. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2019/jan/04/security-releases/>
Leaganacha difearLink to this heading
<64d2396e83aedba3fcc84ca40f23fbd22f0b9b5b>Django 2.1: compromiso: (paiste)
<9f4ed7c94c62e21644ef5115e393ac426b886f2e>Django 2.0:commit: (paiste)
<1cd00fcf52d089ef0fe03beabd05d59df8ea052a>Django 1.11: commit: (paiste)
Deireadh Fómhair 1, 2018 -:cve: 2018-16984Link to this heading
Nochtadh hash pasfhocal d'úsáideoirí riaracháin “féach amháin”. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2018/oct/01/security-release/>
Leaganacha difearLink to this heading
<c4bd5b597e0aa2432e4c867b86650f18af117851>Django 2.1: compromiso: (paiste)
1 Lúnasa, 2018 -:cve: 2018-14574Link to this heading
Oscail an fhéidearthacht atreoraithe i ``CommonMiddleware`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2018/aug/01/security-releases/>
Leaganacha difearLink to this heading
<c4e5ff7fdb5fce447675e90291fd33fddd052b3c>Django 2.1: compromiso: (paiste)
<6fffc3c6d420e44f4029d5643f38d00a39b08525>Django 2.0:commit: (paiste)
<d6eaee092709aad477a9894598496c6deec532ff>Django 1.11: commit: (paiste)
6 Márta, 2018 -:cve: 2018-7537Link to this heading
Féidearthacht seirbhíse a dhiúltú i scagairí teimpléad truncatechars_html agus truncatewords_html. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>
Leaganacha difearLink to this heading
<94c5da1d17a6b0d378866c66b605102c19f7988c>Django 2.0:commit: (paiste)
<a91436360b79a6ff995c3e5018bcc666dfaf1539>Django 1.11: commit: (paiste)
<d17974a287a6ea2e361daff88fcc004cbd6835fa>Django 1.8: compromiso: (paiste)
6 Márta, 2018 -:cve: 2018-7536Link to this heading
Féidearthacht seirbhíse a dhiúltú i scagairí teimpléad urlize agus urlizetrunc. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2018/mar/06/security-releases/>
Leaganacha difearLink to this heading
<e157315da3ae7005fa0683ffc9751dbeca7306c8>Django 2.0:commit: (paiste)
<abf89d729f210c692a50e0ad3f75fb6bec6fae16>Django 1.11: commit: (paiste)
<1ca63a66ef3163149ad822701273e8a1844192c2>Django 1.8: compromiso: (paiste)
1 Feabhra, 2018 -:cve: 2018-6188Link to this heading
Sceitheadh faisnéise i “Form Fíordheimhniúcháin”. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2018/feb/01/security-releases/>
Leaganacha difearLink to this heading
<c37bb28677295f6edda61d8ac461014ef0d3aeb2>Django 2.0:commit: (paiste)
<57b95fedad5e0b83fc9c81466b7d1751c6427aae>Django 1.11: commit: (paiste)
Meán Fómhair 5, 2017 -:cve: 2017-12794Link to this heading
XSS féideartha i gcuid rianaithe de leathanach dífhabhtaithe teicniúil 500. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2017/sep/05/security-releases/>
Leaganacha difearLink to this heading
<e35a0c56086924f331e9422daa266e907a4784cc>Django 1.11: commit: (paiste)
<58e08e80e362db79eb0fd775dc81faad90dca47a>Django 1.10: compromiso: (paiste)
Aibreán 4, 2017 -:cve: 2017-7234Link to this heading
Oscail leochaileacht atreoraithe i ``django.views.static.serve () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2017/apr/04/security-releases/>
Leaganacha difearLink to this heading
<2a9f6ef71b8e23fd267ee2be1be26dde8ab67037>Django 1.10: compromiso: (paiste)
<5f1ffb07afc1e59729ce2b283124116d6c0659e4>Django 1.9: compromiso: (paiste)
<4a6b945dffe8d10e7cec107d93e6efaebfbded29>Django 1.8: compromiso: (paiste)
Aibreán 4, 2017 -:cve: 2017-7233Link to this heading
Athsheoladh oscailte agus ionsaí XSS féideartha trí URLanna athsheolta uimhriúla a sholáthraítear leis `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2017/apr/04/security-releases/>
Leaganacha difearLink to this heading
<f824655bc2c50b19d2f202d7640785caabc82787>Django 1.10: compromiso: (paiste)
<254326cb3682389f55f886804d2c43f7b9f23e4f>Django 1.9: compromiso: (paiste)
<8339277518c7d8ec280070a780915304654e3b66>Django 1.8: compromiso: (paiste)
1 Samhain, 2016 -:cve: 2016-9014Link to this heading
Leochaileacht DNS a athcheangal nuair a bheidh debug = true`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2016/nov/01/security-releases/>
Leaganacha difearLink to this heading
<884e113838e5a72b4b0ec9e5e87aa480f6aa4472>Django 1.10: compromiso: (paiste)
<45acd6d836895a4c36575f48b3fb36a3dae98d19>Django 1.9: compromiso: (paiste)
<c401ae9a7dfb1a94a8a61927ed541d6f93089587>Django 1.8: compromiso: (paiste)
1 Samhain, 2016 -:cve: 2016-9013Link to this heading
Úsáideoir le pasfhocal crua-chódaithe a cruthaíodh agus tástálacha á reáchtáil `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2016/nov/01/security-releases/>
Leaganacha difearLink to this heading
<34e10720d81b8d407aa14d763b6a7fe8f13b4f2e>Django 1.10: compromiso: (paiste)
<4844d86c7728c1a5a3bbce4ad336a8d32304072b>Django 1.9: compromiso: (paiste)
<70f99952965a430daf69eeb9947079aae535d2d0>Django 1.8: compromiso: (paiste)
Meán Fómhair 26, 2016 -:cve: 2016-7401Link to this heading
Seachbhóthar cosanta CSRF ar shuíomh le Google Analytics. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2016/sep/26/security-releases/>
Leaganacha difearLink to this heading
<d1bc980db1c0fffd6d60677e62f70beadb9fe64a>Django 1.9: compromiso: (paiste)
<6118ab7d0676f0d622278e5be215f14fb5410b6a>Django 1.8: compromiso: (paiste)
18 Iúil, 2016 -:cve: 2016-6186Link to this heading
XSS i anaisín a bhaineann le cuirte/athrú riaracháin. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2016/jul/18/security-releases/>
Leaganacha difearLink to this heading
<d03bf6fe4e9bf5b07de62c1a271c4b41a7d3d158>Django 1.9: compromiso: (paiste)
<f68e5a99164867ab0e071a936470958ed867479d>Django 1.8: compromiso: (paiste)
1 Márta, 2016 -:cve: 2016-2513Link to this heading
Áireamh úsáideora trí dhifríocht uainiúcháin ar uasghrádú fachtóra oibre pasfhocal. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2016/mar/01/security-releases/>
Leaganacha difearLink to this heading
<af7d09b0c5c6ab68e629fd9baf736f9dd203b18e>Django 1.9: compromiso: (paiste)
<f4e6e02f7713a6924d16540be279909ff4091eb6>Django 1.8: compromiso: (paiste)
1 Márta, 2016 -:cve: 2016-2512Link to this heading
Atreorú mailíseach agus ionsaí XSS féideartha trí URLanna atreoraithe a sholáthraíonn an úsáideoir ina bhfuil bunúsach `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2016/mar/01/security-releases/>
Leaganacha difearLink to this heading
<fc6d147a63f89795dbcdecb0559256470fff4380>Django 1.9: compromiso: (paiste)
<382ab137312961ad62feb8109d70a5a581fe8350>Django 1.8: compromiso: (paiste)
Feabhra 1, 2016 -:cve: 2016-2048Link to this heading
Is féidir le húsáideoir le cead “athrú” ach ní “cuir leis” rudaí a chruthú do ModelAdmin` le save_as = true`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2016/feb/01/releases-192-and-189/>
Leaganacha difearLink to this heading
<adbca5e4db42542575734b8e5d26961c8ada7265>Django 1.9: compromiso: (paiste)
24 Samhain, 2015 -:cve: 2015-8213Link to this heading
Féidearthacht sceitheadh socruithe i scagaire teimpléad ``dáta ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/nov/24/security-releases-issued/>
Leaganacha difearLink to this heading
<9f83fc2f66f5a0bac7c291aec55df66050bb6991>Django 1.8: compromiso: (paiste)
<8a01c6b53169ee079cb21ac5919fdafcc8c5e172>Django 1.7:commit: (paiste)
18 Lúnasa, 2015 -:cve: 2015-5963 /:cve: 2015-5964Link to this heading
Féidearthacht seirbhíse a dhiúltú i radharc ``logáil amach () ``trí stór seisiúin a líonadh. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/aug/18/security-releases/>
Leaganacha difearLink to this heading
<2eb86b01d7b59be06076f6179a454d0fd0afaff6>Django 1.8: compromiso: (paiste)
<2f5485346ee6f84b4e52068c04e043092daf55f7>Django 1.7:commit: (paiste)
<575f59f9bc7c59a5e41a081d1f5f55fc859c5012>Django 1.4: compromiso: (paiste)
8 Iúil, 2015 -:cve: 2015-5145Link to this heading
Féidearthacht seirbhíse a dhiúltú i mbailíochtú URL. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/jul/08/security-releases/>
Leaganacha difearLink to this heading
<8f9a4d3a2bc42f14bb437defd30c7315adbff22c>Django 1.8: compromiso: (paiste)
8 Iúil, 2015 -:cve: 2015-5144Link to this heading
Féidearthacht insteallta ceanntásc ós rud é go nglacann bailíochtóirí línte nua `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/jul/08/security-releases/>
Leaganacha difearLink to this heading
<574dd5e0b0fbb877ae5827b1603d298edc9bb2a0>Django 1.8: compromiso: (paiste)
<ae49b4d994656bc037513dcd064cb9ce5bb85649>Django 1.7:commit: (paiste)
<1ba1cdce7d58e6740fe51955d945b56ae51d072a>Django 1.4: compromiso: (paiste)
8 Iúil, 2015 -:cve: 2015-5143Link to this heading
Féidearthacht seirbhíse a dhiúltú trí stór seisiún a líonadh. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/jul/08/security-releases/>
Leaganacha difearLink to this heading
<66d12d1ababa8f062857ee5eb43276493720bf16>Django 1.8: compromiso: (paiste)
<1828f4341ec53a8684112d24031b767eba557663>Django 1.7:commit: (paiste)
<2e47f3e401c29bc2ba5ab794d483cb0820855fb9>Django 1.4: compromiso: (paiste)
Bealtaine 20, 2015 -:cve: 2015-3982Link to this heading
Sruthú seisiún seasta sa chúltaca cached_db. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/may/20/security-release/>
Leaganacha difearLink to this heading
<31cb25adecba930bdeee4556709f5a1c42d88fd6>Django 1.8: compromiso: (paiste)
18 Márta, 2015 -:cve: 2015-2317Link to this heading
Ionsaí XSS féideartha a mhaolú trí URLanna atreoraithe a sholáthraíonn an úsáideoir. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/mar/18/security-releases/>
Leaganacha difearLink to this heading
<2342693b31f740a422abf7267c53b4e7bc487c1b>Django 1.4: compromiso: (paiste)
<5510f070711540aaa8d3707776cd77494e688ef9>Django 1.6: compromiso: (paiste)
<2a4113dbd532ce952308992633d802dc169a75f1>Django 1.7:commit: (paiste)
<770427c2896a078925abfca2317486b284d22f04>Django 1.8: compromiso: (paiste)
18 Márta, 2015 -:cve: 2015-2316Link to this heading
Féidearthacht seirbhíse a dhiúltú le strip_tags () `. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/mar/18/security-releases/>
Leaganacha difearLink to this heading
<b6b3cb9899214a23ebb0f4ebf0e0b300b0ee524f>Django 1.6: compromiso: (paiste)
<e63363f8e075fa8d66326ad6a1cc3391cc95cd97>Django 1.7:commit: (paiste)
<5447709a571cd5d95971f1d5d21d4a7edcf85bbd>Django 1.8: compromiso: (paiste)
9 Márta, 2015 -:cve: 2015-2241Link to this heading
Ionsaí XSS trí airíonna in ModelAdmin.ReadOnly_Fields. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/mar/09/security-releases/>
Leaganacha difearLink to this heading
<d16e4e1d6f95e6f46bff53cc4fd0ab398b8e5059>Django 1.7:commit: (paiste)
<2654e1b93923bac55f12b4e66c5e39b16695ace5>Django 1.8: compromiso: (paiste)
13 Eanáir, 2015 -:cve: 2015-0222Link to this heading
Diúltú seirbhíse bunachar sonraí le ``ModelMultipleChoiceField`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/jan/13/security/>
Leaganacha difearLink to this heading
<d7a06ee7e571b6dad07c0f5b519b1db02e2a476c>Django 1.6: compromiso: (paiste)
<bcfb47780ce7caecb409a9e9c1c314266e41d392>Django 1.7:commit: (paiste)
13 Eanáir, 2015 -:cve: 2015-0221Link to this heading
Ionsaí diúltaithe seirbhíse i gcoinne ``django.views.static.serve () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/jan/13/security/>
Leaganacha difearLink to this heading
<d020da6646c5142bc092247d218a3d1ce3e993f7>Django 1.4: compromiso: (paiste)
<553779c4055e8742cc832ed525b9ee34b174934f>Django 1.6: compromiso: (paiste)
<818e59a3f0fbadf6c447754d202d88df025f8f2a>Django 1.7:commit: (paiste)
13 Eanáir, 2015 -:cve: 2015-0220Link to this heading
Ionsaí XSS féideartha a mhaolú trí URLanna atreoraithe a sholáthraíonn an úsáideoir. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/jan/13/security/>
Leaganacha difearLink to this heading
<4c241f1b710da6419d9dca160e80b23b82db7758>Django 1.4: compromiso: (paiste)
<72e0b033662faa11bb7f516f18a132728aa0ae28>Django 1.6: compromiso: (paiste)
<de67dedc771ad2edec15c1d00c083a1a084e1e89>Django 1.7:commit: (paiste)
13 Eanáir, 2015 -:cve: 2015-0219Link to this heading
Spaáil ceanntásc WSGI trí chomhcheangal fo-scór/dash. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2015/jan/13/security/>
Leaganacha difearLink to this heading
<4f6fffc1dc429f1ad428ecf8e6620739e8837450>Django 1.4: compromiso: (paiste)
<d7597b31d5c03106eeba4be14a33b32a5e25f4ee>Django 1.6: compromiso: (paiste)
<41b4bc73ee0da7b2e09f4af47fc1fd21144c710f>Django 1.7:commit: (paiste)
20 Lúnasa, 2014 -:cve: 2014-0483Link to this heading
Sceitheadh sonraí trí ionramháil querystring i riarachán. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2014/aug/20/security/>
Leaganacha difearLink to this heading
<027bd348642007617518379f8b02546abacaa6e0>Django 1.4: compromiso: (paiste)
<2a446c896e7c814661fb9c4f212b071b2a7fa446>Django 1.5:commit: (paiste)
<f7c494f2506250b8cb5923714360a3642ed63e0f>Django 1.6: compromiso: (paiste)
<2b31342cdf14fc20e07c43d258f1e7334ad664a6>Django 1.7:commit: (paiste)
20 Lúnasa, 2014 -:cve: 2014-0482Link to this heading
Fuadach seisiún RemoteUserMiddleWare. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2014/aug/20/security/>
Leaganacha difearLink to this heading
<c9e3b9949cd55f090591fbdc4a114fcb8368b6d9>Django 1.4: compromiso: (paiste)
<dd68f319b365f6cb38c5a6c106faf4f6142d7d88>Django 1.5:commit: (paiste)
<0268b855f9eab3377f2821164ef3e66037789e09>Django 1.6: compromiso: (paiste)
<1a45d059c70385fcd6f4a3955f3b4e4cc96d0150>Django 1.7:commit: (paiste)
20 Lúnasa, 2014 -:cve: 2014-0481Link to this heading
Diúltú seirbhíse uaslódáil comhad. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2014/aug/20/security/>
Leaganacha difearLink to this heading
<30042d475bf084c6723c6217a21598d9247a9c41>Django 1.4: compromiso: (paiste)
<26cd48e166ac4d84317c8ee6d63ac52a87e8da99>Django 1.5:commit: (paiste)
<dd0c3f4ee1a30c1a1e6055061c6ba6e58c6b54d1>Django 1.6: compromiso: (paiste)
<3123f8452cf49071be9110e277eea60ba0032216>Django 1.7:commit: (paiste)
20 Lúnasa, 2014 -:cve: 2014-0480Link to this heading
Is féidir le ``reverse () ``URLanna a ghiniúint ag díriú chuig óstach eile. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2014/aug/20/security/>
Leaganacha difearLink to this heading
<c2fe73133b62a1d9e8f7a6b43966570b14618d7e>Django 1.4: compromiso: (paiste)
<45ac9d4fb087d21902469fc22643f5201d41a0cd>Django 1.5:commit: (paiste)
<da051da8df5e69944745072611351d4cfc6435d5>Django 1.6: compromiso: (paiste)
<bf650a2ee78c6d1f4544a875dcc777cf27fe93e9>Django 1.7:commit: (paiste)
Bealtaine 18, 2014 -:cve: 2014-3730Link to this heading
URLanna míchfhoirmithe ó ionchur úsáideora bailíochtaithe go mícheart. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/>
Leaganacha difearLink to this heading
<7feb54bbae3f637ab3c4dd4831d4385964f574df>Django 1.4: compromiso: (paiste)
<ad32c218850ad40972dcef57beb460f8c979dd6d>Django 1.5:commit: (paiste)
<601107524523bca02376a0ddc1a06c6fdb8f22f3>Django 1.6: compromiso: (paiste)
<e7b0cace455c2da24492660636bfd48c45a19cdf>Django 1.7:commit: (paiste)
Bealtaine 18, 2014 -:cve: 2014-1418Link to this heading
Féadfar cead a thabhairt do chaches sonraí príobháideacha a stóráil agus a sheirbhí `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2014/may/14/security-releases-issued/>
Leaganacha difearLink to this heading
<28e23306aa53bbbb8fb87db85f99d970b051026c>Django 1.4: compromiso: (paiste)
<4001ec8698f577b973c5a540801d8a0bbea1205b>Django 1.5:commit: (paiste)
<1abcf3a808b35abae5d425ed4d44cb6e886dc769>Django 1.6: compromiso: (paiste)
<7fef18ba9e5a8b47bc24b5bb259c8bf3d3879f2a>Django 1.7:commit: (paiste)
Aibreán 21, 2014 -:cve: 2014-0474Link to this heading
Bíonn torthaí ceisteanna gan choinne mar thoradh ar chineál MySQL. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2014/apr/21/security/>
Leaganacha difearLink to this heading
<aa80f498de6d687e613860933ac58433ab71ea4b>Django 1.4: compromiso: (paiste)
<985434fb1d6bf2335bf96c6ebf91c3674f1f399f>Django 1.5:commit: (paiste)
<5f0829a27e85d89ad8c433f5c6a7a7d17c9e9292>Django 1.6: compromiso: (paiste)
<34526c2f56b863c2103655a0893ac801667e86ea>Django 1.7:commit: (paiste)
Aibreán 21, 2014 -:cve: 2014-0473Link to this heading
D'fhéadfadh taiscéáil leathanaigh gan ainm comhartha CSRF a nochtadh. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2014/apr/21/security/>
Leaganacha difearLink to this heading
<1170f285ddd6a94a65f911a27788ba49ca08c0b0>Django 1.4: compromiso: (paiste)
<6872f42757d7ef6a97e0b6ec5db4d2615d8a2bd8>Django 1.5:commit: (paiste)
<d63e20942f3024f24cb8cd85a49461ba8a9b6736>Django 1.6: compromiso: (paiste)
<380545bf85cbf17fc698d136815b7691f8d023ca>Django 1.7:commit: (paiste)
Aibreán 21, 2014 -:cve: 2014-0472Link to this heading
Forghníomhú cód gan choinne ag baint úsáide as ``reverse () ``. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2014/apr/21/security/>
Leaganacha difearLink to this heading
<c1a8c420fe4b27fb2caf5e46d23b5712fc0ac535>Django 1.4: compromiso: (paiste)
<2a5bcb69f42b84464b24b5c835dca6467b6aa7f1>Django 1.5:commit: (paiste)
<4352a50871e239ebcdf64eee6f0b88e714015c1b>Django 1.6: compromiso: (paiste)
<546740544d7f69254a67b06a3fc7fa0c43512958>Django 1.7:commit: (paiste)
Meán Fómhair 14, 2013 -:cve: 2013-1443Link to this heading
Diúltú seirbhíse trí phasfhocail mhóra. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2013/sep/15/security/>
Leaganacha difearLink to this heading
<6903d1690a92aa040adfb0c8eb37cf62e4206714>Django 1.4: commit: (paiste agus <3f3d887a6844ec2db743fee64c9e53e04d39a368>:commit: `Socrú comhoiriúnachta Python) `
<22b74fa09d7ccbc8c52270d648a0da7f3f0fa2bc>Django 1.5:commit: (paiste)
Meán Fómhair 10, 2013 -:cve: 2013-4315Link to this heading
Aistritheoireacht trí chlib teimpléad ssi. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2013/sep/10/security-releases-issued/>
Leaganacha difearLink to this heading
<87d2750b39f6f2d54b7047225521a44dcd37e896>Django 1.4: compromiso: (paiste)
<988b61c550d798f9a66d17ee0511fb7a9a7f33ca>Django 1.5:commit: (paiste)
Lúnasa 13, 2013 -:cve: 2013-6044Link to this heading
XSS féideartha trí scéimeanna atreoraithe URL neamhbhailíochtaithe. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2013/aug/13/security-releases-issued/>
Leaganacha difearLink to this heading
<ec67af0bd609c412b76eaa4cc89968a2a8e5ad6a>Django 1.4: compromiso: (paiste)
<1a274ccd6bc1afbdac80344c9b6e5810c1162b5f>Django 1.5:commit: (paiste)
Lúnasa 13, 2013 -:cve: 2013-4249Link to this heading
XSS trí riarachán ag muinín ag luachanna ``URLField`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2013/aug/13/security-releases-issued/>
Leaganacha difearLink to this heading
<90363e388c61874add3f3557ee654a996ec75d78>Django 1.5:commit: (paiste)
Feabhra 19, 2013 -:cve: 2013-0306Link to this heading
Diúltú seirbhíse trí sheachbhóthar foirmset max_num. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2013/feb/19/security/>
Leaganacha difearLink to this heading
<d7094bbce8cb838f3b40f504f198c098ff1cf727>Django 1.3: compromiso: (paiste)
<0cc350a896f70ace18280410eb616a9197d862b0>Django 1.4: compromiso: (paiste)
Feabhra 19, 2013 -:cve: 2013-0305Link to this heading
Sceitheadh faisnéise trí log stair riaracháin. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2013/feb/19/security/>
Leaganacha difearLink to this heading
<d3a45e10c8ac8268899999129daa27652ec0da35>Django 1.3: compromiso: (paiste)
<0e7861aec73702f7933ce2a93056f7983939f0d6>Django 1.4: compromiso: (paiste)
19 Feabhra, 2013 -:cve: 2013-1664 /:cve: 2013-1665Link to this heading
Ionsaithe bunaithe ar eintiteas i gcoinne leabharlanna Python XML. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2013/feb/19/security/>
Leaganacha difearLink to this heading
<d19a27066b2247102e65412aa66917aff0091112>Django 1.3: compromiso: (paiste)
<1c60d07ba23e0350351c278ad28d0bd5aa410b40>Django 1.4: compromiso: (paiste)
Feabhra 19, 2013 - Gan CVELink to this heading
Cruasú breise ar láimhseáil ceanntásc ``Óst`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2013/feb/19/security/>
Leaganacha difearLink to this heading
<27cd872e6e36a81d0bb6f5b8765a1705fecfc253>Django 1.3: compromiso: (paiste)
<9936fdb11d0bbf0bd242f259bfb97bbf849d16f8>Django 1.4: compromiso: (paiste)
10 Nollaig, 2012 - Uimh CVE 2Link to this heading
Cruasú breise ar bhailíochtú atreoraithe. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2012/dec/10/security/>
Leaganacha difearLink to this heading
<1515eb46daa0897ba5ad5f0a2db8969255f1b343>Django 1.3: :commit: (paiste)
<b2ae0a63aeec741f1e51bac9a95a27fd635f9652>Django 1.4: :commit: (paiste)
10 Nollaig, 2012 - Uimh CVE 1Link to this heading
Cruasú breise ar láimhseáil ceanntásc ``Óst`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2012/dec/10/security/>
Leaganacha difearLink to this heading
<2da4ace0bc1bc1d79bf43b368cb857f6f0cd6b1b>Django 1.3: compromiso: (paiste)
<319627c184e71ae267d6b7f000e293168c7b6e09>Django 1.4: compromiso: (paiste)
Deireadh Fómhair 17, 2012 -:cve: 2012-4520Link to this heading
Nimhiú ceanntásc Óst. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2012/oct/17/security/>
Leaganacha difearLink to this heading
<b45c377f8f488955e0c7069cad3f3dd21910b071>Django 1.3: compromiso: (paiste)
<92d3430f12171f16f566c9050c40feefb830a4a3>Django 1.4: compromiso: (paiste)
30 Iúil, 2012 -:cve: 2012-3444Link to this heading
Diúltú seirbhíse trí chomhaid íomhá móra. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/>
Leaganacha difearLink to this heading
<9ca0ff6268eeff92d0d0ac2c315d4b6a8e229155>Django 1.3: compromiso: (paiste)
<da33d67181b53fe6cc737ac1220153814a1509f6>Django 1.4: compromiso: (paiste)
30 Iúil, 2012 -:cve: 2012-3443Link to this heading
Diúltú seirbhíse trí chomhaid íomhá comhbhrúite. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/>
Leaganacha difearLink to this heading
<b2eb4787a0fff9c9993b78be5c698e85108f3446>Django 1.3: :commit: (paiste)
<c14f325c4eef628bc7bfd8873c3a72aeb0219141>Django 1.4: :commit: (paiste)
30 Iúil, 2012 -:cve: 2012-3442Link to this heading
XSS trí mhainneachtain scéim atreoraithe a bhailíochtú. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2012/jul/30/security-releases-issued/>
Leaganacha difearLink to this heading
<4dea4883e6c50d75f215a6b9bcbd95273f57c72d>Django 1.3: :commit: (paiste)
<e34685034b60be1112160e76091e5aee60149fa1>Django 1.4: :commit: (paiste)
Meán Fómhair 9, 2011 -:cve: 2011-4140Link to this heading
CSRF féideartha trí cheanntásc ``Óst`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2011/sep/09/security-releases-issued/>
Leaganacha difearLink to this heading
Ba chomhairleach amháin a bhí an fógra seo, mar sin níor eisíodh aon phaistí.
Django 1.2
Django 1.3
Meán Fómhair 9, 2011 -:cve: 2011-4139Link to this heading
Nimhiú taisce ceanntásc Óst. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2011/sep/09/security-releases-issued/>
Leaganacha difearLink to this heading
<c613af4d6485586c79d692b70a9acac429f3ca9d>Django 1.2: compromiso: (paiste)
<2f7fadc38efa58ac0a8f93f936b82332a199f396>Django 1.3: compromiso: (paiste)
Meán Fómhair 9, 2011 -:cve: 2011-4138Link to this heading
Sceitheadh faisnéise/eisiúint iarratais treallach trí URLField.Verify_Exists`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2011/sep/09/security-releases-issued/>
Leaganacha difearLink to this heading
<7268f8af86186518821d775c530d5558fd726930>Django 1.2: :commit: (paiste)
<1a76dbefdfc60e2d5954c0ba614c3d054ba9c3f0>Django 1.3: :commit: (paiste)
Meán Fómhair 9, 2011 -:cve: 2011-4137Link to this heading
Diúltú seirbhíse trí URLField.Verify_Exists`. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2011/sep/09/security-releases-issued/>
Leaganacha difearLink to this heading
<7268f8af86186518821d775c530d5558fd726930>Django 1.2: compromiso: (paiste)
<1a76dbefdfc60e2d5954c0ba614c3d054ba9c3f0>Django 1.3: compromiso: (paiste)
Meán Fómhair 9, 2011 -:cve: 2011-4136Link to this heading
Ionramháil seisiúin agus seisiún tacaíochta le cache-cuimhne á úsáid agat. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2011/sep/09/security-releases-issued/>
Leaganacha difearLink to this heading
<ac7c3a110f906e4dfed3a17451bf7fd9fcb81296>Django 1.2: compromiso: (paiste)
<fbe2eead2fa9d808658ca582241bcacb02618840>Django 1.3: compromiso: (paiste)
Feabhra 8, 2011 -:cve: 2011-0698Link to this heading
Traenáil stiúrthóireachta ar Windows trí láimhseáil deighilteoir cosáin mícheart. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2011/feb/08/security/>
Leaganacha difearLink to this heading
<570a32a047ea56265646217264b0d3dab1a14dbd>Django 1.1: compromiso: (paiste)
<194566480b15cf4e294d3f03ff587019b74044b2>Django 1.2: compromiso: (paiste)
Feabhra 8, 2011 -:cve: 2011-0697Link to this heading
XSS trí ainmneacha neamhshláintithe comhaid uaslódáilte. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2011/feb/08/security/>
Leaganacha difearLink to this heading
<1966786d2dde73e17f39cf340eb33fcb5d73904e>Django 1.1: compromiso: (paiste)
<1f814a9547842dcfabdae09573055984af9d3fab>Django 1.2: compromiso: (paiste)
Feabhra 8, 2011 -:cve: 2011-0696Link to this heading
CSRF trí cheanntásca brionnaithe HTTP. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2011/feb/08/security/>
Leaganacha difearLink to this heading
<408c5c873ce1437c7eee9544ff279ecbad7e150a>Django 1.1: compromiso: (paiste)
<818e70344e7193f6ebc73c82ed574e6ce3c91afc>Django 1.2: compromiso: (paiste)
22 Nollaig, 2010 -:cve: 2010-4535Link to this heading
Diúltú seirbhíse i meicníocht athshocraithe pasfhocal. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2010/dec/22/security/>
Leaganacha difearLink to this heading
<7f8dd9cbac074389af8d8fd235bf2cb657227b9a>Django 1.1: compromiso: (paiste)
<d5d8942a160685c403d381a279e72e09de5489a9>Django 1.2: compromiso: (paiste)
22 Nollaig, 2010 -:cve: 2010-4534Link to this heading
Sceite faisnéise i gcomhéadan riaracháin. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2010/dec/22/security/>
Leaganacha difearLink to this heading
<17084839fd7e267da5729f2a27753322b9d415a0>Django 1.1: compromiso: (paiste)
<85207a245bf09fdebe486b4c7bbcb65300f2a693>Django 1.2: compromiso: (paiste)
Meán Fómhair 8, 2010 -:cve: 2010-3082Link to this heading
XSS trí luach fianán neamhshábháilte a bheith iontaofa. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2010/sep/08/security-release/>
Leaganacha difearLink to this heading
<7f84657b6b2243cc787bdb9f296710c8d13ad0bd>Django 1.2: compromiso: (paiste)
Deireadh Fómhair 9, 2009 -:cve: 2009-3695Link to this heading
Diúltú seirbhíse trí fheidhmíocht léirithe paiteolaíoch. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2009/oct/09/security/>
Leaganacha difearLink to this heading
<594a28a9044120bed58671dde8a805c9e0f6c79a>Django 1.0:commit: (paiste)
<e3e992e18b368fcd56aabafc1b5bf80a6e11b495>Django 1.1: compromiso: (paiste)
Iúil 28, 2009 -:cve: 2009-2659Link to this heading
Aistritheoireacht i láimhseálaí meán freastalaí forbartha. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2009/jul/28/security/>
Leaganacha difearLink to this heading
<da85d76fd6ca846f3b0ff414e042ddb5e62e2e69>Django 0.96: commit: (paiste)
<df7f917b7f51ba969faa49d000ffc79572c5dcb4>Django 1.0:commit: (paiste)
Meán Fómhair 2, 2008 -:cve: 2008-3909Link to this heading
CSRF trí shonraí POST a chaomhnú le linn logáil isteach riaracháin. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2008/sep/02/security/>
Leaganacha difearLink to this heading
<44debfeaa4473bd28872c735dd3d9afde6886752>Django 0.91: compromiso: (paiste)
<aee48854a164382c655acb9f18b3c06c3d238e81>Django 0.95: commit: (paiste)
<7e0972bded362bc4b851c109df2c8a6548481a8e>Django 0.96: commit: (paiste)
Bealtaine 14, 2008 -:cve: 2008-2302Link to this heading
XSS trí athreorú logála isteach riaracháin. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2008/may/14/security/>
Leaganacha difearLink to this heading
<6e657e2c404a96e744748209e896d8a69c15fdf2>Django 0.91: compromiso: (paiste)
<50ce7fb57d79e8940ccf6e2781f2f01df029b5c5>Django 0.95: commit: (paiste)
<7791e5c050cebf86d868c5dab7092185b125fdc9>Django 0.96: commit: (paiste)
Deireadh Fómhair 26, 2007 -:cve: 2007-5712Link to this heading
Diúltú seirbhíse trí cheannteideal “Glacadh le Teanga” go mór treallach. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2007/oct/26/security-fix/>
Leaganacha difearLink to this heading
<8bc36e726c9e8c75c681d3ad232df8e882aaac81>Django 0.91: compromiso: (paiste)
<412ed22502e11c50dbfee854627594f0e7e2c234>Django 0.95: commit: (paiste)
<7dd2dd08a79e388732ce00e2b5514f15bd6d0f6f>Django 0.96: commit: (paiste)
Saincheisteanna roimh phróiseas slándála DjangoLink to this heading
Láimhseáladh roinnt saincheisteanna slándála sula raibh próiseas slándála foirmiúil in úsáid ag Django. Chuige seo, b'fhéidir nach n-eisíodh eisiúintí nua ag an am agus b'fhéidir nach sannadh CVanna.
21 Eanáir, 2007 -:cve: 2007-0405Link to this heading
“Caching” le feiceáil úsáideora fíordheimhnithe. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2007/jan/21/0951/>
Leaganacha difearLink to this heading
<e89f0a65581f82a5740bfe989136cea75d09cd67>Django 0.95: commit: (paiste)
16 Lúnasa, 2006 -:cve: 2007-0404Link to this heading
Saincheist bailíochtú ainm comhaid i gcreat aistriúcháin. `Cur síos iomlán`__ < https://www.djangoproject.com/weblog/2006/aug/16/compilemessages/>
Leaganacha difearLink to this heading
<6eefa521be3c658dc0b38f8d62d52e9801e198ab>Django 0.90: commit: (paiste)
<d31e39173c29537e6a1613278c93634c18a3206e>Django 0.91: compromiso: (paiste)
Django 0.95:commit: (paiste) (eisithe 21 E <a132d411c6986418ee6c0edc331080aa792fee6e>anáir 2007)