Simon Willison’s Weblog

Django: security fix released. XSS hole in the Admin application’s login page—updates and patches are available for trunk, 0.96, 0.95 and 0.91.

Posted 14th May 2008 at 7:49 am

Recent articles

Trying out the new Gemini 2.5 model family - 17th June 2025
The lethal trifecta for AI agents: private data, untrusted content, and external communication - 16th June 2025
An Introduction to Google’s Approach to AI Agent Security - 15th June 2025

django 573 django-admin 32 security 526 xss 60

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe