Simon Willison’s Weblog

Django: security fix released. XSS hole in the Admin application’s login page—updates and patches are available for trunk, 0.96, 0.95 and 0.91.

Posted 14th May 2008 at 7:49 am

Recent articles

The evolution of OpenAI's mission statement - 13th February 2026
Introducing Showboat and Rodney, so agents can demo what they’ve built - 10th February 2026
How StrongDM's AI team build serious software without even looking at the code - 7th February 2026

django 583 django-admin 32 security 575 xss 60

Monthly briefing

Sponsor me for $10/month and get a curated email digest of the month's most important LLM developments.

Pay me to send you less!

Sponsor & subscribe