[GHSA-8cjm-8mp7-r2xf] Django 5.2 before 5.2.15 and 6.0 before 6.0.6 store cached responses with case-varied Cache-Control directives

[hahwul]

Updates

• Affected products

Comments
This advisory has no affected package listed. Adding django (PyPI), >= 5.2, < 5.2.15; >= 6.0, < 6.0.6.

The description covers two supported branches, 5.2 before 5.2.15 and 6.0 before 6.0.6. Both releases are published on PyPI. It also notes 5.0.x, 4.1.x and 3.2.x may be affected, but those branches are out of upstream support and the description gives no fixed version for them, so they are left out here.

https://pypi.org/project/Django/5.2.15/
https://pypi.org/project/Django/6.0.6/

[Copilot]

Pull request overview

Adds the missing PyPI affected-package metadata for Django, matching the supported vulnerable branches and published fixed releases.

Changes:

• Adds Django 5.2 through 5.2.14 as affected, fixed in 5.2.15.
• Adds Django 6.0 through 6.0.5 as affected, fixed in 6.0.6.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[advisory-database]

Hi @hahwul! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!