Django · week of 2 Nov 2026

Django security note

Records on this stack that changed between 2 Nov 2026 and the following Monday. Versions come from the stored ranges. A quiet week is not proof the stack is clear.

What changed

CVE-2026-108147 — Check if you run it
An issue was discovered in Django 6.1 before 6.1.3, 6.0.4 before 6.0.10, and 5.2.13 before 5.2.19.
Fixed in 5.2.19-r0
CVE-2026-111362 — Check if you run it
An issue was discovered in Django 6.1 before 6.1.3, 6.0 before 6.0.10, and 5.2 before 5.2.19.
Fixed in 5.2.19-r0

What we still do not know

Every changed record in this note has a version range.

Share this note

Django security note, week of 2 Nov 2026: 2 records have a version a customer can check, and 0 still do not. https://zerodayfindings.com/technologies/django/notes/2026-W45