| Age | Commit message (Expand) | Author |
|---|---|---|
| 2026-02-03 | Fixed CVE-2026-1312 -- Protected order_by() from SQL injection via aliases wi... | Jacob Walls |
| 2026-02-03 | Fixed CVE-2026-1287 -- Protected against SQL injection in column aliases via ... | Jake Howard |
| 2026-02-03 | Fixed CVE-2026-1285 -- Mitigated potential DoS in django.utils.text.Truncator... | Natalia |
| 2026-02-03 | Fixed CVE-2026-1207 -- Prevented SQL injections in RasterField lookups via ba... | Jacob Walls |
| 2026-02-03 | Fixed CVE-2025-14550 -- Optimized repeated header parsing in ASGI requests. | Jake Howard |
| 2026-02-03 | Fixed CVE-2025-13473 -- Standardized timing of check_password() in mod_wsgi a... | Jake Howard |
| 2026-01-27 | Added stub release notes and release date for 6.0.2, 5.2.11, and 4.2.28. | Jacob Walls |
