#django
-
Django moves to an annual release cycle with three years of support
The Django web framework project has adopted a proposal for an annual release cycle. Every release will be supported for three years, and the “LTS” label is becoming a thing of the past.
-
Patches for Veeam, Terraform MCP and Django: The Big Hole Is Cross-Tenant, at CVSS 10.0
HashiCorp, Veeam and the Django Software Foundation have closed 11 vulnerabilities. The most serious is a cross-tenant bug in Terraform MCP Server that lets someone reuse another user's token.