Django security releases issued: 4.0.2, 3.2.12, and 2.2.27

[NewsBot]

A new Django blog post/announcement has been posted!

In accordance with our security release policy, the Django team is issuing Django 4.0.2, Django 3.2.12, and Django 2.2.27. These release addresses the security issues detailed below. We encourage all users of Django to upgrade as soon as possible.

CVE-2022-22818: Possible XSS via {% debug %} template tag

The {% debug %} template tag didn't properly encode the current context, posing an XSS attack vector.

In order to avoid this vulner...

Get the full details here: Django security releases issued: 4.0.2, 3.2.12, and 2.2.27 | Weblog | Django

[bot]

Corresponding tweet for this thread:

Devtalk

Share link for this tweet.