summaryrefslogtreecommitdiff
path: root/django
AgeCommit message (Expand)Author
2026-04-07[4.2.x] Bumped version for 4.2.30 release.4.2.30Jacob Walls
2026-04-07[4.2.x] Fixed CVE-2026-33034 -- Enforced DATA_UPLOAD_MAX_MEMORY_SIZE on body ...Natalia
2026-04-07[4.2.x] Fixed CVE-2026-33033 -- Mitigated potential DoS in MultiPartParser.Natalia
2026-04-07[4.2.x] Fixed CVE-2026-4292 -- Disallowed instance creation via ModelAdmin.li...Jacob Walls
2026-04-07[4.2.x] Fixed CVE-2026-4277 -- Checked add permissions in GenericInlineModelA...Jacob Walls
2026-04-07[4.2.x] Fixed CVE-2026-3902 -- Ignored headers with underscores in ASGIRequest.Jacob Walls
2026-03-03[4.2.x] Post-release version bump.Natalia
2026-03-03[4.2.x] Bumped version for 4.2.29 release.4.2.29Natalia
2026-03-03[4.2.x] Fixed CVE-2026-25674 -- Prevented potentially incorrect permissions o...Natalia
2026-03-03[4.2.x] Fixed CVE-2026-25673 -- Simplified URLField scheme detection.Natalia
2026-02-03[4.2.x] Post-release version bump.Jacob Walls
2026-02-03[4.2.x] Bumped version for 4.2.28 release.4.2.28Jacob Walls
2026-02-03[4.2.x] Refs CVE-2026-1312 -- Raised ValueError when FilteredRelation aliases...Jacob Walls
2026-02-03[4.2.x] Fixed CVE-2026-1312 -- Protected order_by() from SQL injection via al...Jacob Walls
2026-02-03[4.2.x] Fixed CVE-2026-1287 -- Protected against SQL injection in column alia...Jake Howard
2026-02-03[4.2.x] Fixed CVE-2026-1285 -- Mitigated potential DoS in django.utils.text.T...Natalia
2026-02-03[4.2.x] Fixed CVE-2026-1207 -- Prevented SQL injections in RasterField lookup...Jacob Walls
2026-02-03[4.2.x] Fixed CVE-2025-14550 -- Optimized repeated header parsing in ASGI req...Jake Howard
2026-02-03[4.2.x] Fixed CVE-2025-13473 -- Standardized timing of check_password() in mo...Jake Howard
2025-12-02[4.2.x] Post-release version bump.Natalia
2025-12-02[4.2.x] Bumped version for 4.2.27 release.4.2.27Natalia
2025-12-02[4.2.x] Fixed CVE-2025-64460 -- Corrected quadratic inner text accumulation i...Shai Berger
2025-12-02[4.2.x] Fixed CVE-2025-13372 -- Protected FilteredRelation against SQL inject...Jacob Walls
2025-11-26[4.2.x] Fixed #36743 -- Increased URL max length enforced in HttpResponseRedi...varunkasyap
2025-11-05[4.2.x] Post-release version bump.Natalia
2025-11-05[4.2.x] Bumped version for 4.2.26 release.4.2.26Natalia
2025-11-05[4.2.x] Refs CVE-2025-64459 -- Avoided propagating invalid arguments to Q on ...Jacob Walls
2025-11-05[4.2.x] Fixed CVE-2025-64459 -- Prevented SQL injections in Q/QuerySet via th...Jacob Walls
2025-11-05[4.2.x] Fixed CVE-2025-64458 -- Mitigated potential DoS in HttpResponseRedire...Jacob Walls
2025-10-01[4.2.x] Post-release version bump.Jacob Walls
2025-10-01[4.2.x] Bumped version for 4.2.25 release.4.2.25Jacob Walls
2025-10-01[4.2.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal v...Sarah Boyce
2025-10-01[4.2.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggre...Mariusz Felisiak
2025-09-03[4.2.x] Post-release version bump.Sarah Boyce
2025-09-03[4.2.x] Bumped version for 4.2.24 release.4.2.24Sarah Boyce
2025-09-03[4.2.x] Fixed CVE-2025-57833 -- Protected FilteredRelation against SQL inject...Jake Howard
2025-06-10[4.2.x] Post-release version bump.Sarah Boyce
2025-06-10[4.2.x] Bumped version for 4.2.23 release.4.2.23Sarah Boyce
2025-06-06[4.2.x] Refs CVE-2025-48432 -- Prevented log injection in remaining response ...Jake Howard
2025-06-06[4.2.x] Refs CVE-2025-48432 -- Made SuspiciousOperation logging use log_respo...Natalia
2025-06-04[4.2.x] Post-release version bump.Natalia
2025-06-04[4.2.x] Bumped version for 4.2.22 release.4.2.22Natalia
2025-06-04[4.2.x] Fixed CVE-2025-48432 -- Escaped formatting arguments in `log_response...Natalia
2025-05-06[4.2.x] Post-release version bump.Natalia
2025-05-06[4.2.x] Bumped version for 4.2.21 release.4.2.21Natalia
2025-05-06[4.2.x] Fixed CVE-2025-32873 -- Mitigated potential DoS in strip_tags().Sarah Boyce
2025-04-23[4.2.x] Fixed #36341 -- Preserved whitespaces in wordwrap template filter.Matti Pohjanvirta
2025-04-23[4.2.x] Fixed warnings per flake8 7.2.0.Mariusz Felisiak
2025-04-07[4.2.x] Fixed #36298 -- Truncated the overwritten file content in file_move_s...Sarah Boyce
2025-03-06[4.2.x] Post-release version bump.Sarah Boyce