... issions to a parent model but edit permissions to the inline model, would display a read-only view of the parent model but editable forms for the inline. Submitting these forms would not allow direct edits to the parent model, but would trigger the paren ... has been changed. Now, if a user has only the "view" permission for a parent model, the entire displayed form will not be editable, even if the user has permission to edit models included in inlines. This is a backwards-incompatible change, and the Djan ... the desired functionality. In the longer term, adding a documented, supported, and properly-tested mechanism for partially-editable multi-model forms to the admin interface may occur in Django itself. バグ修正 ¶ Fixed a data loss possibility in the selec ... ... This issue has severity "low" according to the Django security policy . CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable ¶ Admin changelist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This is ... hen conflation CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload CVE-2026-33034 ... derate ASGIRequest hyphens even proxies headers named server Privilege abuse GenericInlineModelAdmin instances forged list editable using クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... This issue has severity "low" according to the Django security policy . CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable ¶ Admin changelist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This is ... hen conflation CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload CVE-2026-33034 ... derate ASGIRequest hyphens even proxies headers named server Privilege abuse GenericInlineModelAdmin instances forged list editable using クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... issions to a parent model but edit permissions to the inline model, would display a read-only view of the parent model but editable forms for the inline. Submitting these forms would not allow direct edits to the parent model, but would trigger the paren ... has been changed. Now, if a user has only the "view" permission for a parent model, the entire displayed form will not be editable, even if the user has permission to edit models included in inlines. This is a backwards-incompatible change, and the Djan ... the desired functionality. In the longer term, adding a documented, supported, and properly-tested mechanism for partially-editable multi-model forms to the admin interface may occur in Django itself. バグ修正 ¶ Fixed a data loss possibility in the admin ... ... issions to a parent model but edit permissions to the inline model, would display a read-only view of the parent model but editable forms for the inline. Submitting these forms would not allow direct edits to the parent model, but would trigger the paren ... has been changed. Now, if a user has only the "view" permission for a parent model, the entire displayed form will not be editable, even if the user has permission to edit models included in inlines. This is a backwards-incompatible change, and the Djan ... the desired functionality. In the longer term, adding a documented, supported, and properly-tested mechanism for partially-editable multi-model forms to the admin interface may occur in Django itself. バグ修正 ¶ Fixed a data loss possibility in the selec ... ... issions to a parent model but edit permissions to the inline model, would display a read-only view of the parent model but editable forms for the inline. Submitting these forms would not allow direct edits to the parent model, but would trigger the paren ... has been changed. Now, if a user has only the "view" permission for a parent model, the entire displayed form will not be editable, even if the user has permission to edit models included in inlines. This is a backwards-incompatible change, and the Djan ... the desired functionality. In the longer term, adding a documented, supported, and properly-tested mechanism for partially-editable multi-model forms to the admin interface may occur in Django itself. バグ修正 ¶ Fixed a data loss possibility in the admin ... ... through model from being editable if the user only has the view permission ( #30289 ). 目次 Django 2.1.8 リリースノート バグ修正 前のトピックへ Django 2.1.9 ... スノート 関連キーワード リリースノート April fixes バグ 修正 Prevented admin inlines ManyToManyField implicit through model editable user view クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... This issue has severity "low" according to the Django security policy . CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable ¶ Admin changelist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This is ... hen conflation CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload CVE-2026-33034 ... ... This issue has severity "low" according to the Django security policy . CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable ¶ Admin changelist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This is ... hen conflation CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartParser via base64-encoded file upload CVE-2026-33034 ... ... 29460 ). Fixed a regression in Django 1.10 that could result in large memory usage when making edits using ModelAdmin.list_editable ( #28462 ). 目次 Django 1.11.14 リリースノート バグ修正 前のトピックへ Django 1.11.15 リリースノート 次のトピックへ Django ... 修正 Fixed write リリースノート WKBWriter empty polygons regression large memory usage making edits using ModelAdmin list editable クイック検索 Last update: 2026年10月09日 « previous | up | next » ... 2026年10月08日