Django 3.1.6 release notesLink para este cabeçalho
February 1, 2021
Django 3.1.6 fixes a security issue with severity “low” and a bug in 3.1.5.
CVE-2021-3281: Potential directory-traversal via archive.extract()Link para este cabeçalho
The django.utils.archive.extract() function, used by
startapp --template and startproject --template, allowed
directory-traversal via an archive with absolute paths or relative paths with
dot segments.
BugfixesLink para este cabeçalho
Fixed an admin layout issue in Django 3.1 where changelist filter controls would become squashed (#32391).