Ana Guerrero
9b3cc6e10c
- Update to 5.2.14
* CVE-2026-5766: Potential denial-of-service vulnerability in ASGI
requests via file upload limit bypass (bsc#1264153)
* CVE-2026-35192: Session fixation via public cached pages and
SESSION_SAVE_EVERY_REQUEST (bsc#1264154)
* CVE-2026-6907: Potential exposure of private data due to incorrect
handling of Vary: * in UpdateCacheMiddleware (bsc#1264152)
OBS-URL: https://build.opensuse.org/request/show/1351138
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/python-Django?expand=0&rev=148