Django 2.1.6 release notes¶
February 11, 2019
Django 2.1.6 fixes a security issue and a bug in 2.1.5.
CVE-2019-6975: Memory exhaustion in
django.utils.numberformat.format() – used by
contrib.admin as well
intcomma templates filters
– received a
Decimal with a large number of digits or a large exponent, it
could lead to significant memory usage due to a call to
To avoid this, decimals with more than 200 digits are now formatted using scientific notation.