mirrors/django
1
0
Fork 0
mirror of https://github.com/django/django.git synced 2025-10-09 14:59:24 +00:00
Code Issues 32 Releases Wiki Activity
django/django
History
Sarah Boyce ed8fc39d77 [5.2.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal via archive.extract(). 
Thanks stackered for the report.

Follow up to 05413afa8c18cdb978fcdf470e09f7a12b234a23.

Backport of 924a0c092e65fa2d0953fd1855d2dc8786d94de2 from main.
2025-10-01 08:25:20 -04:00
..
apps
Fixed #34687 -- Made Apps.clear_cache() clear get_swappable_settings_name() cache.
2023-06-30 08:27:15 +02:00
conf
[5.2.x] Updated translations from Transifex.
2025-09-18 09:50:46 -03:00
contrib
[5.2.x] Updated translations from Transifex.
2025-09-18 09:50:46 -03:00
core
[5.2.x] Refs CVE-2025-48432 -- Made SuspiciousOperation logging use log_response() for consistency.
2025-06-06 09:07:06 -03:00
db
[5.2.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggregate(), and extra() against SQL injection in column aliases on MySQL/MariaDB.
2025-10-01 08:24:18 -04:00
dispatch
Fixed #35174 -- Fixed Signal.asend()/asend_robust() crash when all receivers are asynchronous.
2024-02-08 11:36:28 +01:00
forms
[5.2.x] Applied Black's 2025 stable style.
2025-03-01 19:47:17 +01:00
http
[5.2.x] Fixed #36447 -- Selected preferred media type based on quality.
2025-06-16 09:27:46 +02:00
middleware
Removed unneeded hyphens in "counterintuitive".
2024-07-04 08:30:19 +02:00
template
[5.2.x] Applied Black's 2025 stable style.
2025-03-01 19:47:17 +01:00
templatetags
Refs #34233 -- Used str.removeprefix()/removesuffix().
2023-01-18 19:11:18 +01:00
test
[5.2.x] Added SimpleTestCase.enterContext() on Python < 3.11.
2025-07-16 18:11:53 -03:00
urls
Fixed #25582 -- Added support for query and fragment to django.urls.reverse().
2024-12-11 16:40:28 -03:00
utils
[5.2.x] Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal via archive.extract().
2025-10-01 08:25:20 -04:00
views
[5.2.x] Refs CVE-2025-48432 -- Prevented log injection in remaining response logging.
2025-06-06 09:07:12 -03:00
__init__.py
[5.2.x] Post-release version bump.
2025-09-03 13:29:20 +02:00
__main__.py
Applied Black's 2024 stable style.
2024-01-26 12:45:07 +01:00
shortcuts.py
Fixed #35784 -- Added support for preserving the HTTP request method in HttpResponseRedirectBase.
2024-11-14 15:53:49 -03:00