... not affected. This issue has severity "low" according to the Django security policy . CVE-2026-8404: Potential exposure of private data via case-sensitive Cache-Control directives ¶ UpdateCacheMiddleware and cache_page() incorrectly cached responses mar ... ked with private Cache-Control directives when using mixed or uppercase values (e.g. Private ). The cache_control() decorator and patch_cac ... et manually. This issue has severity "low" according to the Django security policy . CVE-2026-35193: Potential exposure of private data via missing Vary: Authorization ¶ UpdateCacheMiddleware and cache_page() decorator allowed responses to requests bear ... ... not affected. This issue has severity "low" according to the Django security policy . CVE-2026-8404: Potential exposure of private data via case-sensitive Cache-Control directives ¶ UpdateCacheMiddleware and cache_page() incorrectly cached responses mar ... ked with private Cache-Control directives when using mixed or uppercase values (e.g. Private ). The cache_control() decorator and patch_cac ... et manually. This issue has severity "low" according to the Django security policy . CVE-2026-35193: Potential exposure of private data via missing Vary: Authorization ¶ UpdateCacheMiddleware and cache_page() decorator allowed responses to requests bear ... ... not affected. This issue has severity "low" according to the Django security policy . CVE-2026-8404: Potential exposure of private data via case-sensitive Cache-Control directives ¶ UpdateCacheMiddleware and cache_page() incorrectly cached responses mar ... ked with private Cache-Control directives when using mixed or uppercase values (e.g. Private ). The cache_control() decorator and patch_cac ... et manually. This issue has severity "low" according to the Django security policy . CVE-2026-35193: Potential exposure of private data via missing Vary: Authorization ¶ UpdateCacheMiddleware and cache_page() decorator allowed responses to requests bear ... ... not affected. This issue has severity "low" according to the Django security policy . CVE-2026-8404: Potential exposure of private data via case-sensitive Cache-Control directives ¶ UpdateCacheMiddleware and cache_page() incorrectly cached responses mar ... ked with private Cache-Control directives when using mixed or uppercase values (e.g. Private ). The cache_control() decorator and patch_cac ... et manually. This issue has severity "low" according to the Django security policy . CVE-2026-35193: Potential exposure of private data via missing Vary: Authorization ¶ UpdateCacheMiddleware and cache_page() decorator allowed responses to requests bear ... ... public page. This issue has severity "low" according to the Django security policy . CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware ¶ Previously, UpdateCacheMiddleware would erroneously c ... ache requests where the Vary header contained an asterisk ( '*' ). This could lead to private data being stored and served. This issue has severity "low" according to the Django security policy . 目次 Django 5.2.14 r ... E-2026-35192: Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware 前のトピックへ Django 5.2.15 release notes 次のトピック ... ... public page. This issue has severity "low" according to the Django security policy . CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware ¶ Previously, UpdateCacheMiddleware would erroneously c ... ache requests where the Vary header contained an asterisk ( '*' ). This could lead to private data being stored and served. This issue has severity "low" according to the Django security policy . 目次 Django 5.2.14 r ... E-2026-35192: Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware 前のトピックへ Django 5.2.15 release notes 次のトピック ... ... public page. This issue has severity "low" according to the Django security policy . CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware ¶ Previously, UpdateCacheMiddleware would erroneously c ... ache requests where the Vary header contained an asterisk ( '*' ). This could lead to private data being stored and served. This issue has severity "low" according to the Django security policy . バグ修正 ¶ Fixed a m ... E-2026-35192: Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware バグ修正 前のトピックへ Django 6.0.6 release notes 次の ... ... public page. This issue has severity "low" according to the Django security policy . CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware ¶ Previously, UpdateCacheMiddleware would erroneously c ... ache requests where the Vary header contained an asterisk ( '*' ). This could lead to private data being stored and served. This issue has severity "low" according to the Django security policy . バグ修正 ¶ Fixed a m ... E-2026-35192: Session fixation via public cached pages and SESSION_SAVE_EVERY_REQUEST CVE-2026-6907: Potential exposure of private data due to incorrect handling of Vary: * in UpdateCacheMiddleware バグ修正 前のトピックへ Django 6.0.6 release notes 次の ... ... private data ¶ In certain situations, Django may allow caches to store private data related to a particular session and then serve that data to requests with a different session, or no session at all. ... ctly validate these malformed URLs. 目次 Django 1.4.13 リリースノート Caches may incorrectly be allowed to store and serve private data Malformed redirect URLs from user input not correctly validated 前のトピックへ Django 1.4.14 リリースノート 次のトピッ ... ード header Internet Explorer URLs user correctly serve session requests Vary these validate malformed security issues store private caches sessions older versions Windows handle remedy removed redirect クイック検索 Last update: 2026年10月09日 « previous ... ... vate data ¶ In certain situations, Django may allow caches to store private data related to a particular session and then serve that data to requests with a different session, or no session at all. ... ectly validate these malformed URLs. 目次 Django 1.5.8 リリースノート Caches may incorrectly be allowed to store and serve private data Malformed redirect URLs from user input not correctly validated 前のトピックへ Django 1.5.9 リリースノート 次のトピッ ... ード header Internet Explorer URLs user correctly serve session requests Vary these validate malformed security issues store private caches sessions older versions Windows handle remedy removed redirect クイック検索 Last update: 2026年10月09日 « previous ... 2026年10月08日