Django security releases issued: 3.2.10, 3.1.14, and 2.2.25

[NewsBot]

A new Django blog post/announcement has been posted!

In accordance with our security release policy, the Django team is issuing Django 3.2.10, Django 3.1.14, and Django 2.2.25. These release addresses the security issue detailed below. We encourage all users of Django to upgrade as soon as possible.

CVE-2021-44420: Potential bypass of an upstream access control based on URL paths

HTTP requests for URLs with trailing newlines could bypass an upstream access control based on URL paths.

This issue has low severity, according...

Get the full details here: Django security releases issued: 3.2.10, 3.1.14, and 2.2.25 | Weblog | Django

[bot]

Corresponding tweet for this thread:

Devtalk

Share link for this tweet.