Jacob Walls

Blog Info	The Django weblog
Blog website	Link

Django bugfix releases issued: 5.2.10, 6.0.1

Jan. 6, 2026 » The Django weblog » [Archived Version]

Today we've issued the 5.2.10 and 6.0.1 bugfix releases. The release packages and checksums are available from our downloads page, as well as from the Python Package Index. The PGP key ID used for these releases is Jacob Walls: 131403F4D16D8DC7

Django security releases issued: 5.2.7, 5.1.13, and 4.2.25

Oct. 1, 2025 » The Django weblog » [Archived Version]

In accordance with our security release policy, the Django team is issuing releases for Django 5.2.7, Django 5.1.13, and Django 4.2.25. These releases address the security issues detailed below. We encourage all users of Django to upgrade as soon as possible. CVE-2025-59681: Potential SQL injection in QuerySet.annotate(), alias(), aggregate(), and extra() on MySQL and MariaDB QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() methods were subject to SQL injection…