Web app framework Django contains a vulnerability that puts session cookies at risk, but the group in charge has decided not to patch the flaw, and instead warn developers about the problem. A ...

Security researchers have begun stumbling upon misconfigured Django applications that are exposing sensitive information such as API keys, server passwords, or AWS access tokens. The main reason for ...

Another issue is that Django's ORM can be restrictive. Granted, Django's security tools may not cover all extreme cases, but these are exceptions, such as disabling CSRF protection, which can create ...