... gets and puts such a URL into a link, they could suffer from an XSS attack. CVE-2016-2513: User enumeration through timing difference on password hasher work factor upgrade ¶ In each major version of Django since 1.6, the default number of iterations for t ... ncreased. This improves the security of the password as the speed of hardware increases, however, it also creates a timing difference between a login request for a user with a password encoded in an older number of iterations and login request for a nonexi ... er logs in after an iterations increase, their password is updated with the new iterations and there is no longer a timing difference. The new BasePasswordHasher.harden_runtime() method allows hashers to bridge the runtime gap between the work factor (e.g. ... ... gets and puts such a URL into a link, they could suffer from an XSS attack. CVE-2016-2513: User enumeration through timing difference on password hasher work factor upgrade ¶ In each major version of Django since 1.6, the default number of iterations for t ... ncreased. This improves the security of the password as the speed of hardware increases, however, it also creates a timing difference between a login request for a user with a password encoded in an older number of iterations and login request for a nonexi ... er logs in after an iterations increase, their password is updated with the new iterations and there is no longer a timing difference. The new BasePasswordHasher.harden_runtime() method allows hashers to bridge the runtime gap between the work factor (e.g. ... ... gets and puts such a URL into a link, they could suffer from an XSS attack. CVE-2016-2513: User enumeration through timing difference on password hasher work factor upgrade ¶ In each major version of Django since 1.6, the default number of iterations for t ... ncreased. This improves the security of the password as the speed of hardware increases, however, it also creates a timing difference between a login request for a user with a password encoded in an older number of iterations and login request for a nonexi ... er logs in after an iterations increase, their password is updated with the new iterations and there is no longer a timing difference. The new BasePasswordHasher.harden_runtime() method allows hashers to bridge the runtime gap between the work factor (e.g. ... ... gets and puts such a URL into a link, they could suffer from an XSS attack. CVE-2016-2513: User enumeration through timing difference on password hasher work factor upgrade ¶ In each major version of Django since 1.6, the default number of iterations for t ... ncreased. This improves the security of the password as the speed of hardware increases, however, it also creates a timing difference between a login request for a user with a password encoded in an older number of iterations and login request for a nonexi ... er logs in after an iterations increase, their password is updated with the new iterations and there is no longer a timing difference. The new BasePasswordHasher.harden_runtime() method allows hashers to bridge the runtime gap between the work factor (e.g. ... ... format values for date/time widgets results in an empty value in the widget's HTML ( #28355 ). Fixed QuerySet.union() and difference() when combining with a queryset raising EmptyResultSet ( #28378 ). Fixed a regression in pickling of LazyObject on Python ... eld , MultiValueField , FileField , ModelChoiceField , and ModelMultipleChoiceField . Fixed QuerySet.count() for union() , difference() , and intersection() queries. ( #28399 ). Fixed ClearableFileInput rendering as a subwidget of MultiWidget ( #28414 ). C ... ースノート 次のトピックへ Django 1.11.3 リリースノート 関連キーワード Fixed widget checkbox regression values QuerySet union difference queryset crash input context initial text リリースノート August fixes several bugs バグ 修正 format date time widgets クイ ... ... format values for date/time widgets results in an empty value in the widget's HTML ( #28355 ). Fixed QuerySet.union() and difference() when combining with a queryset raising EmptyResultSet ( #28378 ). Fixed a regression in pickling of LazyObject on Python ... eld , MultiValueField , FileField , ModelChoiceField , and ModelMultipleChoiceField . Fixed QuerySet.count() for union() , difference() , and intersection() queries. ( #28399 ). Fixed ClearableFileInput rendering as a subwidget of MultiWidget ( #28414 ). C ... ックへ Django 1.11.3 リリースノート 関連キーワード Fixed Python widget checkbox Django regression non values QuerySet union difference queryset crash input context initial text リリースノート August fixes 関連するページ Django 2.0.4 リリースノート Django 1. ... ... 1.11.8 where combining two annotated values_list() querysets with union() , difference() , or intersection() crashed due to mismatching columns ( #29229 ). Fixed a regression in Django 1.11 where an empty choi ... 11 リリースノート 関連キーワード バグ 修正 Fixed regression リリースノート combining annotated values list querysets union difference intersection crashed mismatching columns empty choice initially selected SelectMultiple CheckboxSelectMultiple widgets クイ ... ... 1.11.8 where combining two annotated values_list() querysets with union() , difference() , or intersection() crashed due to mismatching columns ( #29229 ). Fixed a regression in Django 1.11 where an empty choi ... スノート 関連キーワード Django バグ 修正 Fixed regression リリースノート combining two annotated values list querysets union difference intersection crashed due mismatching columns empty 関連するページ Django 2.1.3 リリースノート Django 3.0.2 リリースノート ... ... derate", and one security issue with severity "low" in 4.2.27. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler ¶ The django.contrib.auth.handlers.modwsgi.check_password() function for authentication ... rding to the Django security policy . 目次 Django 4.2.28 release notes CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler CVE-2025-14550: Potential denial-of-service vulnerability via repeated headers when usi ... ... derate", and one security issue with severity "low" in 5.2.10. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler ¶ The django.contrib.auth.handlers.modwsgi.check_password() function for authentication ... rding to the Django security policy . 目次 Django 5.2.11 release notes CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler CVE-2025-14550: Potential denial-of-service vulnerability via repeated headers when usi ... 2026年10月08日