Django team issues bugfix releases for Django 5.2.3, 5.1.11, and 4.2.23 to complete mitigation for CVE-2025-48432.
The updates address potential log injection via unescaped request path by migrating remaining response logging paths to a safer implementation.
The bugfix releases do not introduce new CVE but strengthen the original fix, urging all Django users to upgrade promptly.
Patches to resolve the issue have been applied to Django's main, 5.2, 5.1, and 4.2 branches, with download links and checksums provided for the new releases.