... ate", and provides a fix for an insufficient security mitigation in 5.2.17. It also fixes one data loss issue in 4.0. CVE-2026-77050: Potential denial-of-service vulnerability in get_supported_language_variant() ¶ get_supported_lang ... this vulnerability, language codes longer than 500 characters are now rejected or truncated before the cached lookup. This issue has severity "low" according to the Django security policy . CVE-2026-84429: Potential denial-of-service vulnerability in ... malformed or unusual header values may differ, for example, RFC 2231 values with a missing encoding are now decoded. This issue has severity "moderate" according to the Django security policy . CVE-2026-87890: Potential request forgery via spatial lo ... ... e", and provides a fix for an insufficient security mitigation in 6.0.8. It also fixes one data loss issue in 4.0. CVE-2026-77050: Potential denial-of-service vulnerability in get_supported_language_variant() ¶ get_supported_lang ... this vulnerability, language codes longer than 500 characters are now rejected or truncated before the cached lookup. This issue has severity "low" according to the Django security policy . CVE-2026-84429: Potential denial-of-service vulnerability in ... malformed or unusual header values may differ, for example, RFC 2231 values with a missing encoding are now decoded. This issue has severity "moderate" according to the Django security policy . CVE-2026-87890: Potential request forgery via spatial lo ... ... ate", and provides a fix for an insufficient security mitigation in 5.2.17. It also fixes one data loss issue in 4.0. CVE-2026-77050: Potential denial-of-service vulnerability in get_supported_language_variant() ¶ get_supported_lang ... this vulnerability, language codes longer than 500 characters are now rejected or truncated before the cached lookup. This issue has severity "low" according to the Django security policy . CVE-2026-84429: Potential denial-of-service vulnerability in ... malformed or unusual header values may differ, for example, RFC 2231 values with a missing encoding are now decoded. This issue has severity "moderate" according to the Django security policy . CVE-2026-87890: Potential request forgery via spatial lo ... ... e", and provides a fix for an insufficient security mitigation in 6.0.8. It also fixes one data loss issue in 4.0. CVE-2026-77050: Potential denial-of-service vulnerability in get_supported_language_variant() ¶ get_supported_lang ... this vulnerability, language codes longer than 500 characters are now rejected or truncated before the cached lookup. This issue has severity "low" according to the Django security policy . CVE-2026-84429: Potential denial-of-service vulnerability in ... malformed or unusual header values may differ, for example, RFC 2231 values with a missing encoding are now decoded. This issue has severity "moderate" according to the Django security policy . CVE-2026-87890: Potential request forgery via spatial lo ... ... e", and provides a fix for an insufficient security mitigation in 6.1. It also fixes one data loss issue in 4.0, one infinite loop in 5.2, and several bugs in 6.1.1. CVE-2026-77050: Potential denial-of-service vulnerability in ... this vulnerability, language codes longer than 500 characters are now rejected or truncated before the cached lookup. This issue has severity "low" according to the Django security policy . CVE-2026-84429: Potential denial-of-service vulnerability in ... malformed or unusual header values may differ, for example, RFC 2231 values with a missing encoding are now decoded. This issue has severity "moderate" according to the Django security policy . CVE-2026-87890: Potential request forgery via spatial lo ... ... e", and provides a fix for an insufficient security mitigation in 6.1. It also fixes one data loss issue in 4.0, one infinite loop in 5.2, and several bugs in 6.1.1. CVE-2026-77050: Potential denial-of-service vulnerability in ... this vulnerability, language codes longer than 500 characters are now rejected or truncated before the cached lookup. This issue has severity "low" according to the Django security policy . CVE-2026-84429: Potential denial-of-service vulnerability in ... malformed or unusual header values may differ, for example, RFC 2231 values with a missing encoding are now decoded. This issue has severity "moderate" according to the Django security policy . CVE-2026-87890: Potential request forgery via spatial lo ... ... derate", and one security issue with severity "low" in 4.2.27. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication h ... _password() function for authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via ... while combining repeated headers, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookup ... ... derate", and one security issue with severity "low" in 5.2.10. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication h ... _password() function for authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via ... while combining repeated headers, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookup ... ... derate", and one security issue with severity "low" in 4.2.27. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication h ... _password() function for authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via ... while combining repeated headers, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookup ... ... derate", and one security issue with severity "low" in 5.2.10. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication h ... _password() function for authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via ... while combining repeated headers, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookup ... 2026年10月08日