Django Security Update Fixes Server-Side File Write, XSS, and DoS Flaws

The Django project has shipped Django 6.0.8 and Django 5.2.17, patching four vulnerabilities ranging from high-severity server-side file write to moderate cross-site scripting (XSS) and low/moderate denial-of-service (DoS) issues. The releases, announced by Natalia Bidart on August 4, 2026, follow Django’s standard security release policy and affect the main branch, the 6.1 release candidate, and the 6.0 and 5.2 branches. The most critical issue, CVE-2026-15307, stems…