... USE_SSL are not affected. This issue has severity "low" according to the Django security policy . CVE-2026-8404: Potential exposure of private data via case-sensitive Cache-Control directives ¶ UpdateCacheMiddleware and cache_page() incorrectly cached re ... Control is set manually. This issue has severity "low" according to the Django security policy . CVE-2026-35193: Potential exposure of private data via missing Vary: Authorization ¶ UpdateCacheMiddleware and cache_page() decorator allowed responses to re ... vary on Authorization . This issue has severity "low" according to the Django security policy . CVE-2026-48587: Potential exposure of private data via whitespace padding in Vary header ¶ UpdateCacheMiddleware incorrectly cached responses whose Vary head ... ... USE_SSL are not affected. This issue has severity "low" according to the Django security policy . CVE-2026-8404: Potential exposure of private data via case-sensitive Cache-Control directives ¶ UpdateCacheMiddleware and cache_page() incorrectly cached re ... Control is set manually. This issue has severity "low" according to the Django security policy . CVE-2026-35193: Potential exposure of private data via missing Vary: Authorization ¶ UpdateCacheMiddleware and cache_page() decorator allowed responses to re ... vary on Authorization . This issue has severity "low" according to the Django security policy . CVE-2026-48587: Potential exposure of private data via whitespace padding in Vary header ¶ UpdateCacheMiddleware incorrectly cached responses whose Vary head ... ... USE_SSL are not affected. This issue has severity "low" according to the Django security policy . CVE-2026-8404: Potential exposure of private data via case-sensitive Cache-Control directives ¶ UpdateCacheMiddleware and cache_page() incorrectly cached re ... Control is set manually. This issue has severity "low" according to the Django security policy . CVE-2026-35193: Potential exposure of private data via missing Vary: Authorization ¶ UpdateCacheMiddleware and cache_page() decorator allowed responses to re ... vary on Authorization . This issue has severity "low" according to the Django security policy . CVE-2026-48587: Potential exposure of private data via whitespace padding in Vary header ¶ UpdateCacheMiddleware incorrectly cached responses whose Vary head ... ... USE_SSL are not affected. This issue has severity "low" according to the Django security policy . CVE-2026-8404: Potential exposure of private data via case-sensitive Cache-Control directives ¶ UpdateCacheMiddleware and cache_page() incorrectly cached re ... Control is set manually. This issue has severity "low" according to the Django security policy . CVE-2026-35193: Potential exposure of private data via missing Vary: Authorization ¶ UpdateCacheMiddleware and cache_page() decorator allowed responses to re ... vary on Authorization . This issue has severity "low" according to the Django security policy . CVE-2026-48587: Potential exposure of private data via whitespace padding in Vary header ¶ UpdateCacheMiddleware incorrectly cached responses whose Vary head ... ... its a cached public page. This issue has severity "low" according to the Django security policy . CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware ¶ Previously, UpdateCacheMiddleware would er ... it bypass CVE-2026-35192: Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware 前のトピックへ Django 5.2.15 release notes 次 ... ... its a cached public page. This issue has severity "low" according to the Django security policy . CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware ¶ Previously, UpdateCacheMiddleware would er ... it bypass CVE-2026-35192: Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware 前のトピックへ Django 5.2.15 release notes 次 ... ... ue has severity "low" according to the Django security policy . 目次 Django 5.2.16 release notes CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response CVE-2026-53877: Heap buffer over-read in GDALRaster CVE-2026-53878: Header ... ... ue has severity "low" according to the Django security policy . 目次 Django 5.2.16 release notes CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response CVE-2026-53877: Heap buffer over-read in GDALRaster CVE-2026-53878: Header ... ... its a cached public page. This issue has severity "low" according to the Django security policy . CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware ¶ Previously, UpdateCacheMiddleware would er ... it bypass CVE-2026-35192: Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware バグ修正 前のトピックへ Django 6.0.6 release ... ... al exposure of private data via cached Set-Cookie response ¶ UpdateCacheMiddleware and cache_page() avoided caching responses that set ... rds supplied as str or as UTF-8 bytes are unaffected ( #37184 ). 目次 Django 6.0.7 release notes CVE-2026-48588: Potential exposure of private data via cached Set-Cookie response CVE-2026-53877: Heap buffer over-read in GDALRaster CVE-2026-53878: Header ... 2026年10月08日