| Age | Commit message (Expand) | Author |
|---|---|---|
| 2026-02-03 | [5.2.x] Fixed CVE-2026-1287 -- Protected against SQL injection in column alia... | Jake Howard |
| 2025-10-01 | [5.2.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggre... | Mariusz Felisiak |
| 2024-08-06 | Fixed CVE-2024-42005 -- Mitigated QuerySet.values() SQL injection attacks aga... | Simon Charette |
| 2022-04-14 | Relaxed some query ordering assertions in various tests. | Mariusz Felisiak |
| 2022-04-11 | Fixed CVE-2022-28346 -- Protected QuerySet.annotate(), aggregate(), and extra... | Mariusz Felisiak |
| 2022-02-07 | Refs #33476 -- Reformatted code with Black. | django-bot |
| 2020-02-04 | Simplified imports from django.db and django.contrib.gis.db. | Nick Pope |
| 2017-01-18 | Refs #23919 -- Removed encoding preambles and future imports | Claude Paroz |
| 2016-08-18 | Fixed #25871 -- Added expressions support to QuerySet.values(). | Ian Foote |
