django.git/docs/releases/3.2.13.txt, branch main django http://cgit.adnoto.dev/django.git/atom?h=main 2022-04-11T06:59:58Z Fixed CVE-2022-28347 -- Protected QuerySet.explain(**options) against SQL injection on PostgreSQL. 2022-04-11T06:59:58Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-04-01T11:48:47Z urn:sha1:6723a26e59b0b5429a0c5873941e01a2e1bdbb81 Fixed CVE-2022-28346 -- Protected QuerySet.annotate(), aggregate(), and extra() against SQL injection in column aliases. 2022-04-11T06:59:33Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-04-01T06:10:22Z urn:sha1:93cae5cb2f9a4ef1514cf1a41f714fef08005200 Thanks Splunk team: Preston Elder, Jacob Davis, Jacob Moore, Matt Hanson, David Briggs, and a security researcher: Danylo Dmytriiev (DDV_UA) for the report. Fixed #33628 -- Ignored directories with empty names in autoreloader check for template changes. 2022-04-11T05:37:30Z Manel Clos manelclos@gmail.com 2022-04-09T09:36:26Z urn:sha1:62739b6e2630e37faa68a86a59fad135cc788cd7 Regression in 68357b2ca9e88c40fc00d848799813241be39129. Added stub release notes and release date for 4.0.4, 3.2.13, and 2.2.28. 2022-04-04T08:31:57Z Mariusz Felisiak felisiak.mariusz@gmail.com 2022-04-01T06:37:19Z urn:sha1:78277faafd38d8360efc1fd0c9c52d7bb5eec002