diff options
| author | Natalia <124304+nessita@users.noreply.github.com> | 2025-06-04 10:57:51 -0300 |
|---|---|---|
| committer | Natalia <124304+nessita@users.noreply.github.com> | 2025-06-04 10:58:40 -0300 |
| commit | 48a82d44d83ab3bbe9116b472e3cd42d4d9a8145 (patch) | |
| tree | b2596347bd0472e27eefb4e5ecdd665d43d2eb8d /docs | |
| parent | 3bc3ce8e64336efba4230079491172244a36f18d (diff) | |
[5.2.x] Added CVE-2025-48432 to security archive.
Backport of 51923c576a596ad00214e44028f9dee9748bce95 from main.
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/releases/security.txt | 11 |
1 files changed, 11 insertions, 0 deletions
diff --git a/docs/releases/security.txt b/docs/releases/security.txt index 05444b929c..e676a965bd 100644 --- a/docs/releases/security.txt +++ b/docs/releases/security.txt @@ -36,6 +36,17 @@ Issues under Django's security process All security issues have been handled under versions of Django's security process. These are listed below. +June 4, 2025 - :cve:`2025-48432` +-------------------------------- + +Potential log injection via unescaped request path. +`Full description +<https://www.djangoproject.com/weblog/2025/jun/04/security-releases/>`__ + +* Django 5.2 :commit:`(patch) <7456aa23dafa149e65e62f95a6550cdb241d55ad>` +* Django 5.1 :commit:`(patch) <596542ddb46cdabe011322917e1655f0d24eece2>` +* Django 4.2 :commit:`(patch) <ac03c5e7df8680c61cdb0d3bdb8be9095dba841e>` + May 7, 2025 - :cve:`2025-32873` ------------------------------- |