Changes between Version 39 and Version 40 of SecurityTeam

Timestamp:

Sep 14, 2026, 11:09:06 AM (4 hours ago)

Author:

Jake Howard

Comment:

Add response for unhandled exceptions

SecurityTeam

@@ -280 +280 @@
 Saludos.
 
+=== Unhandled exception ===
+
+Hello,
+
+Thank you for your report.
+
+An unhandled exception on its own isn't a security vulnerability. A stack trace or 500 error just means something crashed, not that there's a security impact. For us to treat this as a vulnerability, we'd need to see something beyond the crash: an unauthenticated attacker can trigger it cheaply and repeatedly with real effect on the service, or it exposes data that shouldn't be exposed, or it bypasses a security control.
+
+If you can demonstrate that, please resubmit and we'll take another look.
+
+Kind regards, the Django Security Team.
+
 == Duplicated (unreleased) report ==