django.git/docs/releases/4.2.25.txt, branch main django http://cgit.adnoto.dev/django.git/atom?h=main 2025-10-01T12:12:07Z Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal via archive.extract(). 2025-10-01T12:12:07Z Sarah Boyce 42296566+sarahboyce@users.noreply.github.com 2025-09-16T15:13:36Z urn:sha1:924a0c092e65fa2d0953fd1855d2dc8786d94de2 Thanks stackered for the report. Follow up to 05413afa8c18cdb978fcdf470e09f7a12b234a23. Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggregate(), and extra() against SQL injection in column aliases on MySQL/MariaDB. 2025-10-01T12:11:45Z Mariusz Felisiak felisiak.mariusz@gmail.com 2025-09-10T07:53:52Z urn:sha1:41b43c74bda19753c757036673ea9db74acf494a Thanks sw0rd1ight for the report. Follow up to 93cae5cb2f9a4ef1514cf1a41f714fef08005200. Added stub release notes and release date for 5.2.7, 5.1.13, and 4.2.25. 2025-09-24T15:39:07Z Mariusz Felisiak felisiak.mariusz@gmail.com 2025-09-12T17:28:20Z urn:sha1:00174507f8a91e9577ae233c58af561b379f2695