Django 6.0.7

Release Date: June 27, 2026

OK DJANGO 6.0.7 JUST DROPPED ☕️ Three security fixes and a bug squashed in one clean release period.

Django dropped 6.0.7 as a follow-up to 6.0.6 and it's all about keeping your apps locked down period.

Security Fixes 🔒

Three low-severity CVEs patched. Nothing to panic about but patch now anyway period.

CVE-2026-xxxx — Signed cookie salt namespace collision. If you're using signed cookies with custom salts, upgrade ASAP period.
STARTTLS fix — SMTP backend now properly enforces encryption. Your emails won't accidentally leak in plaintext anymore period.
Additional hardening — One more security edge case cleaned up in the ORM period.

Plus one bugfix in 6.0.6 that was annoying a bunch of people. They heard you period.

pip install django==6.0.7 — that's it period. No breaking changes no migration drama just a straight upgrade.

Django stays winning in 2026 period go update 🔗