Django 5.1.7 リリースノート

2025年3月6日

Django 5.1.7 では、 5.1.6 における深刻度 "moderate" のセキュリティの問題1件と、いくつかのバグを修正しました。

CVE-2025-26699: django.utils.text.wrap() における潜在的な DoS 攻撃の脆弱性

The wrap() and wordwrap template filter were subject to a potential denial-of-service attack when used with very long strings.

バグ修正

• Fixed a bug in Django 5.1 where the {% querystring %} template tag returned an empty string rather than "?" when all parameters had been removed from the query string (#36182).

• Fixed a bug in Django 5.1 where FileSystemStorage, with allow_overwrite set to True, did not truncate the overwritten file content (#36191).

• Fixed a regression in Django 5.1 where the count and exists methods of ManyToManyField related managers would always return 0 and False when the intermediary model back references used to_field (#36197).

• Fixed a regression in Django 5.1 where the pre_save and post_save signals for LogEntry were not sent when deleting a single object in the admin (#36217).