January 4, 2019
Django 2.0.10 fixes a security issue and several bugs in 2.0.9.
An attacker could craft a malicious URL that could make spoofed content appear
on the default page generated by the
The URL path is no longer displayed in the default 404 template and the
request_path context variable is now quoted to fix the issue for custom
templates that use the path.
WKBWriterclass in an attempt to fix a random crash involving
LooseVersionsince Django 2.0.6 (#29959).