... derate", and one security issue with severity "low" in 4.2.27. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler ¶ The d ... ) function for authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via repeated hea ... ining repeated headers, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ... ... derate", and one security issue with severity "low" in 5.2.10. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler ¶ The d ... ) function for authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via repeated hea ... ining repeated headers, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ... ... derate", and one security issue with severity "low" in 4.2.27. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler ¶ The d ... ) function for authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via repeated hea ... ining repeated headers, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ... ... derate", and one security issue with severity "low" in 5.2.10. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authentication handler ¶ The d ... ) function for authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via repeated hea ... ining repeated headers, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ... ... rate", one security issue with severity "low", and several bugs in 6.0.1. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authenticatio ... ) function for authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via repeated hea ... ining repeated headers, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ... ... rate", one security issue with severity "low", and several bugs in 6.0.1. CVE-2025-13473: Username enumeration through timing difference in mod_wsgi authenticatio ... ) function for authentication via mod_wsgi allowed remote attackers to enumerate users via a timing attack. This issue has severity "low" according to the Django security policy . CVE-2025-14550: Potential denial-of-service vulnerability via repeated hea ... ining repeated headers, which produced super-linear computation resulting in service degradation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ... ... derscores are now ignored by ASGIRequest , matching the behavior of Daphne , the reference server for ASGI. This issue has severity "low" according to the Django security policy . CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin ¶ Add permission ... on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable ¶ Admin changel ... ist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartPars ... ... derscores are now ignored by ASGIRequest , matching the behavior of Daphne , the reference server for ASGI. This issue has severity "low" according to the Django security policy . CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin ¶ Add permission ... on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable ¶ Admin changel ... ist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartPars ... ... derscores are now ignored by ASGIRequest , matching the behavior of Daphne , the reference server for ASGI. This issue has severity "low" according to the Django security policy . CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin ¶ Add permission ... on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable ¶ Admin changel ... ist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartPars ... ... derscores are now ignored by ASGIRequest , matching the behavior of Daphne , the reference server for ASGI. This issue has severity "low" according to the Django security policy . CVE-2026-4277: Privilege abuse in GenericInlineModelAdmin ¶ Add permission ... on inline model instances were not validated on submission of forged POST data in GenericInlineModelAdmin . This issue has severity "low" according to the Django security policy . CVE-2026-4292: Privilege abuse in ModelAdmin.list_editable ¶ Admin changel ... ist forms using list_editable incorrectly allowed new instances to be created via forged POST data. This issue has severity "low" according to the Django security policy . CVE-2026-33033: Potential denial-of-service vulnerability in MultiPartPars ... 2026年10月08日