1
0
mirror of https://github.com/django/django.git synced 2025-03-31 19:46:42 +00:00

4 Commits

Author SHA1 Message Date
Sarah Boyce
0c1a890916 [5.1.x] Fixed CVE-2024-41990 -- Mitigated potential DoS in urlize and urlizetrunc template filters.
Thanks to MProgrammer for the report.
2024-08-06 08:51:22 +02:00
Sarah Boyce
0504af6429 [5.1.x] Fixed CVE-2024-41989 -- Prevented excessive memory consumption in floatformat.
Thanks Elias Myllymäki for the report.

Co-authored-by: Shai Berger <shai@platonix.com>
2024-08-06 08:51:22 +02:00
Sarah Boyce
405cecd65c [5.1.x] Added stub release notes and release date for 5.0.8 and 4.2.15.
Backport of 3f880890699d4412cf23b59dba425111f62afb3a from main.
2024-07-31 11:24:35 +02:00
Lorenzo Peña
741f33eaf1 [5.1.x] Fixed #35627 -- Raised a LookupError rather than an unhandled ValueError in get_supported_language_variant().
LocaleMiddleware didn't handle the ValueError raised by
get_supported_language_variant() when language codes were
over 500 characters.

Regression in 9e9792228a6bb5d6402a5d645bc3be4cf364aefb.

Backport of 0e94f292cda632153f2b3d9a9037eb0141ae9c2e from main.
2024-07-25 09:40:49 +02:00