Changes between Version 10 and Version 11 of SecurityTeam

Timestamp:

Nov 11, 2025, 1:51:44 PM (3 days ago)

Author:

Jacob Walls

Comment:

--

SecurityTeam

@@ -53 +53 @@
 
 [0] https://docs.djangoproject.com/en/stable/internals/security/#user-input-must-be-sanitized
+
+Because of this, the behavior you reported is not considered a security issue within the Django project.
+
+Thanks for taking the time to submit it through the appropriate channel.
+
+=== Private API ===
+After review, we've determined that the reported issue only affects direct usage of private, undocumented functionality. As documented at [0]:
+
+> Django contains many private and undocumented functions that are not part of its public API. If a vulnerability depends on directly calling these internal functions in an unsafe way, it will not be considered a valid security issue.
+
+[0] https://docs.djangoproject.com/en/stable/internals/security/#code-under-test-must-feasibly-exist-in-a-django-project
 
 Because of this, the behavior you reported is not considered a security issue within the Django project.