django.git/docs/releases/5.2.7.txt, branch main django http://cgit.adnoto.dev/django.git/atom?h=main 2025-10-01T12:12:07Z Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal via archive.extract(). 2025-10-01T12:12:07Z Sarah Boyce 42296566+sarahboyce@users.noreply.github.com 2025-09-16T15:13:36Z urn:sha1:924a0c092e65fa2d0953fd1855d2dc8786d94de2 Thanks stackered for the report. Follow up to 05413afa8c18cdb978fcdf470e09f7a12b234a23. Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggregate(), and extra() against SQL injection in column aliases on MySQL/MariaDB. 2025-10-01T12:11:45Z Mariusz Felisiak felisiak.mariusz@gmail.com 2025-09-10T07:53:52Z urn:sha1:41b43c74bda19753c757036673ea9db74acf494a Thanks sw0rd1ight for the report. Follow up to 93cae5cb2f9a4ef1514cf1a41f714fef08005200. Made cosmetic edits to 5.2.7 release notes. 2025-09-30T20:31:01Z Jacob Walls jacobtylerwalls@gmail.com 2025-09-30T20:31:01Z urn:sha1:6c82b0bc91fc650891b0b411ac4a5a86cf0cf3e8 Added stub release notes and release date for 5.2.7, 5.1.13, and 4.2.25. 2025-09-24T15:39:07Z Mariusz Felisiak felisiak.mariusz@gmail.com 2025-09-12T17:28:20Z urn:sha1:00174507f8a91e9577ae233c58af561b379f2695 Updated translations from Transifex. 2025-09-18T12:53:05Z Natalia 124304+nessita@users.noreply.github.com 2025-09-18T00:58:24Z urn:sha1:4840ab09651e4770e24d72895bc701d70d8e4f34 Forwardport of 2a2936c3e6444a0f37156773ca405cedaf28dea7 from stable/5.2.x. Fixed #36601 -- Fixed color contrast of FilteredSelectMultiple widget chosen labels in TabularInlines. 2025-09-17T07:56:01Z antoliny0919 antoliny0919@gmail.com 2025-09-10T02:27:50Z urn:sha1:1e7728888dbbff437ad9847c82b84feb81f785df Regression in a0f50c2a483678d31bd1ad6f08fd3a0b8399e27b. Added stub release notes for 5.2.7. 2025-09-03T13:20:37Z Sarah Boyce 42296566+sarahboyce@users.noreply.github.com 2025-09-03T13:20:37Z urn:sha1:ab7c7dd99b3ddc489d9f007b273d891973212aa3