Django Security Releases: 6.1.2, 6.0.9 and 5.2.18
By BIOS Founding Team
Django issued security releases for the 6.1, 6.0 and 5.2 series, fixing five issues. They include a low-severity denial of service in get_supported_language_variant() and a moderate denial of service from quadratic header parsing in parse_header_parameters().
The other fixes cover a moderate request forgery through spatial lookup byte values, which now requires GDALRaster wrapping and is backward-incompatible, and a moderate privilege abuse in model formsets with editable primary keys. A stronger follow-up fix for the nested geometry collection denial of service is also included. Django recommends upgrading as soon as possible.
Full details: https://www.djangoproject.com/weblog/2026/oct/06/security-releases/
More from the community
Docker Hub Security Advisory: Personal Access Token Transfer
Docker Hub's account-to-organization conversion could reassign a converted account's personal access tokens to a named new owner without rotating the secret or notifying that owner. Docker rated the issue critical.
Vue 3.6.0-rc.11
The latest release candidate adds one feature: Vapor slot content can now transition inside a VDOM Transition. It also has about 60 bug fixes, mainly in the Vapor compiler and runtime.
Python 3.15.0 Is Here
Python 3.15.0 is the stable release of the 3.15 series, built from 5,643 commits by 1,012 contributors. Headline changes are explicit lazy imports (PEP 810), a frozendict built-in (PEP 814), a sentinel built-in (PEP 6...