The Django Security Team

Django security reporting update

Oct. 8, 2026 » The Django weblog » [Archived Version]

We are no longer accepting new security reports for the Django project through HackerOne. Existing reports submitted through HackerOne will remain open and continue to be handled by the Django Security Team. If you discover a security issue in Django, please follow the reporting process described in the Django security policies. Security issues should be reported by emailing [email protected]