| Blog | The Django weblog |
|---|---|
| RSS 2.0 Feed | The Django weblog |
| web | https://www.djangoproject.com/weblog/ |
| Last Update | 11.14.2026 |
| Posts | 217 |
Latest news about Django, the Python web framework.
| Blog | The Django weblog |
|---|---|
| RSS 2.0 Feed | The Django weblog |
| web | https://www.djangoproject.com/weblog/ |
| Last Update | 11.14.2026 |
| Posts | 217 |
Nov. 3, 2026 » The Django weblog » [Archived Version]
In accordance with our security release policy, the Django team is issuing releases for Django 6.1.3, Django 6.0.10, and Django 5.2.19. These releases address the security issues detailed below. We encourage all users of Django to upgrade as soon as possible. CVE-2026-108147: Potential memory exhaustion in MultiPartParser via base64-encoded file upload When using django.http.multipartparser.MultiPartParser, multipart uploads with Content-Transfer-Encoding: base64 could be buffered entirely in m…
Read MoreOct. 26, 2026 » The Django weblog » [Archived Version]
After more than three years as a Django Fellow, I will be taking a three-month break from Fellow duties during November, December, and January. This time will allow me to properly rest, reset, and recover from some accumulated fatigue so I can return with renewed energy. I'm deeply grateful to the DSF Board for its support of this arrangement, and to my Django Fellow colleagues and the members of the various teams and working groups who will help provide continuity during my leave. I look forwa…
Read MoreOct. 19, 2026 » The Django weblog » [Archived Version]
Hi Django community, thank you all for continuing to contribute to Django. The Steering Council is reaching out to bring people's attention to a few areas. We have major features we'd like to test and review for 6.2, smaller changes that could use attention and then various New Feature ideas we'd like community input on. Major features These PRs are things we'd like to refine, test and get merged in. We're looking for people to test the features themselves and review the PRs. Please see our gui…
Read MoreOct. 8, 2026 » The Django weblog » [Archived Version]
We are no longer accepting new security reports for the Django project through HackerOne. Existing reports submitted through HackerOne will remain open and continue to be handled by the Django Security Team. If you discover a security issue in Django, please follow the reporting process described in the Django security policies. Security issues should be reported by emailing [email protected]
Read MoreOct. 6, 2026 » The Django weblog » [Archived Version]
In accordance with our security release policy, the Django team is issuing releases for Django 6.1.2, Django 6.0.9, and Django 5.2.18. These releases address the security issues detailed below. We encourage all users of Django to upgrade as soon as possible. CVE-2026-77050: Potential denial-of-service vulnerability in get_supported_language_variant() django.utils.translation.get_supported_language_variant() was subject to a potential denial-of-service attack when processing many distinct, very …
Read MoreOct. 1, 2026 » The Django weblog » [Archived Version]
Hello Everyone 👋 It is that time of year again when we recognize someone from our community in memory of our friend Malcolm. Malcolm was an early core contributor to Django and had a huge influence on the Django we know today. Besides being knowledgeable, he was also especially friendly to new users and contributors. He exemplified what it means to be an amazing Open Source contributor. We still miss him to this day. The prize Our prizes page summarizes it nicely: The Malcolm Tredinnick Memor…
Read MoreSept. 24, 2026 » The Django weblog » [Archived Version]
For September 2026, we welcome Ken Whitesell as our DSF member of the month! ⭐ Ken has long been part of the Django community, serving for many years as an helper in the Django forum and recipient of the Malcolm Tredinnick Memorial award. He has been a volunteer for DjangoCon US for over ten years. He is a DSF member since September 2017! You can learn more about Ken by visiting Ken's blog and his GitHub Profile. Let’s spend some time getting to know Ken better! Can you tell us a little about …
Read MoreSept. 22, 2026 » The Django weblog » [Archived Version]
Both the Steering Council and DSF Board have approved DEP 19, which implements our new technical governance. Thank you to everyone who read the document and participated in the process! This was the effort of two different DSF boards and dozens of community members. These changes were a revisitation of Django’s technical governance in which a simplification and reduction was made to make it more approachable to more people. The most exciting change (in my opinion), is the new Steering Council E…
Read MoreSept. 18, 2026 » The Django weblog » [Archived Version]
We're proposing a new voting membership status to help us track active members. If you've voted in a Board election in the last two years, you're active, and you count toward quorum. If you haven't, you're still a member, but you won't count toward quorum until you tell us you want to vote. Why make this change? Quorum today is measured against every member on the rolls, including members who no longer take part in elections. As membership grows, quorum becomes harder to reach and puts our elec…
Read MoreSept. 16, 2026 » The Django weblog » [Archived Version]
We are extending the search for the Django Software Foundation's first Executive Director. Applications now close at the end of Tuesday, September 22, 2026, anywhere on Earth (AoE). As long as it is still September 22 somewhere, your application counts. We are happy with the applications we received. We also knew several people had applications in progress, and it took a while for word about the role to reach everyone it should have. Giving people a little more time felt like the fairest option…
Read More