Django Releases Security Patches to Address DoS and Permission Vulnerabilities

Django published security updates for supported branches to address two vulnerabilities: CVE-2026-25673, a moderate DoS risk in URLField on Windows due to costly Unicode normalization, and CVE-2026-25674, a low-severity file-permission issue from reliance on process umask; fixes are applied to main and released branches (6.0.3, 5.2.12, 4.2.29), and developers are urged to upgrade and review affected code such as custom validators and file-storage logic.