February 6, 2024
Django 5.0.2 fixes a security issue with severity “moderate” and several bugs in 5.0.1. Also, the latest string translations from Transifex are incorporated.
intcomma
template filter¶The intcomma
template filter was subject to a potential denial-of-service
attack when used with very long strings.
ModelAdmin.list_filter
(#35087).Model.full_clean()
on
models with a GeneratedField
(#35127).FilteredRelation()
with querysets as right-hand sides (#35135).
FilteredRelation()
now raises a ValueError
on querysets as right-hand
sides.dumpdata
management command when a base queryset used prefetch_related()
(#35159).request_finished
signal to
sometimes not be fired when running Django through an ASGI server, resulting
in potential resource leaks (#35059).BinaryField
, TextField
, JSONField
, or GeometryField
with a
db_default
(#35162).db_default
of a complex type such as dict
instance of a
JSONField
. Running makemigrations
might generate no-op AlterField
operations for fields using db_default
(#35149).Jun 25, 2024