July 7, 2026 » The Django weblog » [Archived Version]
In accordance with our security release policy, the Django team is issuing releases for Django 6.0.7 and Django 5.2.16. These releases address the security issues detailed below. We encourage all users of Django to upgrade as soon as possible. CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response django.middleware.cache.UpdateCacheMiddleware and django.views.decorators.cache.cache_page avoided caching responses that set a cookie while varying on Cookie only when the …
Read MoreJuly 3, 2026 » Django on the Med 🏖️ » [Archived Version]
Hi everyone 👋 We are happy to share a few more confirmed details for Django on the Med 🏖️ 2026. The event will take place from September 23 to 25, 2026 in Pescara, Italy 🇮🇹 Venue The sprint room is now confirmed and will be at the Hotel Plaza Pescara (Piazza Sacro Cuore 55, 65122 Pescara) We will meet for three sprint mornings, roughly from 08:30 to 13:30. The sprint venue is right in the city centre, very close to Pescara Centrale railway station and the bus terminal. Of course, you are welcom…
Read MoreJuly 2, 2026 » Better Simple » [Archived Version]
Part of the Nifty Django features series: learn how F expressions reference model fields in queries, useful for filters, ordering, and race conditions.
Read MoreJuly 1, 2026 » Matthias Kestenholz » [Archived Version]
Weeknotes (2026 week 27) The last entry in this series was published 10 weeks ago so it really is time for another review of the releases I did during this time. Releases feincms3-forms The feincms3-forms forms builder has gained a documentation page on the wonderful Read the Docs service. The 0.6.1 release doesn’t contain any code changes, just pyproject.toml updates and the mentioned documentation rework. django-imagefield django-imagefield 0.23 is still in alpha. The handling of image fields…
Read MoreJune 30, 2026 » The Django weblog » [Archived Version]
The Django community runs on volunteer effort spread across several different groups of people. Most of it is public, but it isn't always easy to find. Here are the public places to find it: Weekly DSF Office Hours (website) DSF Board updates (website, GitHub repo) Steering Council (forum thread, GitHub repo) Website Working Group (forum thread) Online Community Working Group (forum thread) Django Fellow Reports (Jacob, Natalia, Sarah) DSF Office Hours Most of these are places to read and fol…
Read MoreJune 29, 2026 » The Django weblog » [Archived Version]
For June 2026, we welcome Salim Nuru as our DSF member of the month! ⭐ Salim was a Djangonaut Space participant in the first session. He has been an organizer of the DjangoCon Africa conference. He is currently the chair of the DjangoCon US website team. He a DSF member since October 2024. He is looking for new opportunities! You can learn more about Salim by visiting Salim's blog and his GitHub Profile. Let’s spend some time getting to know Salim better! Can you tell us a little about yoursel…
Read MoreJune 26, 2026 » Better Simple » [Archived Version]
A review of Noah Kantrowitz's DjangoCon US talk on doing more things within Django, avoiding external services.
Read MoreJune 25, 2026 » The Django weblog » [Archived Version]
Why the DSF pursued CNA status Django has a long history of responsible security practices: a dedicated, private security mailing list, clear advisory policies, and predictable security releases. Even so, we relied on external organizations to assign CVE IDs (Common Vulnerabilities and Exposures). This sometimes introduced administrative delays and extra coordination overhead. Becoming a CNA (CVE Numbering Authority) allows the DSF to: Assign CVEs ourselves for vulnerabilities in Django and se…
Read More