1
0
mirror of https://github.com/django/django.git synced 2025-07-14 06:39:24 +00:00

2 Commits

Author SHA1 Message Date
Florian Apolloner
7cf7d74e8a [2.2.x] Fixed #30530, CVE-2021-44420 -- Fixed potential bypass of an upstream access control based on URL paths.
Thanks Sjoerd Job Postmus and TengMA(@te3t123) for reports.

Backport of d4dcd5b9dd9e462fec8220e33e3e6c822b7e88a6 from main.
2021-12-07 07:02:14 +01:00
Mariusz Felisiak
fac0fdd95d [2.2.x] Added stub release notes for 2.2.25.
Backport of ae4077e13ea2e4c460c3f21b9aab93a696590851 from main.
2021-11-30 11:31:56 +01:00