3 people 1f5fe1b237 SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (Z#23236468) (#6260) ...

* SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (Z#23236468)

* SMTP SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (#6264)

---------

Co-authored-by: pajowu <engelhardt@pretix.eu>

2026-06-26 16:45:20 +02:00

..

formats

Stop using ordinal numbers in English date represenation (Z#23210534) (#5539)

2025-10-15 09:06:54 +02:00

metrics

Update license header (#5540)

2025-10-10 15:32:46 +02:00

migrations

Migrate from AutoField to BigAutoField (#3493)

2023-09-27 08:59:10 +02:00

profile

Update license header (#5540)

2025-10-10 15:32:46 +02:00

templatetags

[SECURITY] Fix reflected XSS in redirection page (CVE-2026-57533)

2026-06-25 16:46:13 +02:00

__init__.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

apps.py

[SECURITY] Prevent reading of any local files in reportlab (CVE-2026-57535)

2026-06-25 16:46:13 +02:00

cache.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

celery.py

Add prioritization to webhook/notifications queue (#5513)

2025-12-02 09:13:01 +01:00

compat.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

config.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

cookies.py

Revert "Disable partitioned cookies for Safari due to WebKit bugs (#5843)"

2026-02-20 10:08:51 +01:00

countries.py

Fix custom pycountry_add index handling (#5869)

2026-02-02 09:41:32 +01:00

database.py

Quotas: Add bulk-edit, bulk-delete and filter form (#6080)

2026-05-04 12:44:22 +02:00

daterange.py

Stop using ordinal numbers in English date represenation (Z#23210534) (#5539)

2025-10-15 09:06:54 +02:00

dicts.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

escapejson.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

filenames.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

format.py

SafeFormatter: Ignore conversion spec

2026-02-13 12:35:49 +01:00

hierarkey.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

http.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

i18n.py

Translation status: Properly account for plurals

2026-01-07 09:20:37 +01:00

images.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

iter.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

json.py

Allow admins to inspect invoices (#5641)

2025-11-19 14:42:18 +01:00

jsonlogic_boolalg.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

jsonlogic_query.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

jsonlogic.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

logs.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

models.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

money.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

monkeypatching.py

SSRF protection: Edge case handling for CGNAT and v4/v6 mapping (Z#23236468) (#6260)

2026-06-26 16:45:20 +02:00

names.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

payment.py

Refactor payment QR code generation code and add SPAYD format (#5680)

2025-12-04 14:15:29 +01:00

periodic.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

permission_migration.py

Pluggable permissions (#5728)

2026-03-17 14:43:56 +01:00

reportlab.py

[SECURITY] Properly escape HTML tags in PDF generation (CVE-2026-57535)

2026-06-25 16:46:13 +02:00

safe_openpyxl.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

safedownload.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

security.py

Rename confusingly named helpers for URL generation (#6280)

2026-06-22 09:11:55 +02:00

template_loaders.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

thumb.py

Thumbnails: Perform color space transform before resizing (Z#23232101) (#6120)

2026-04-28 15:35:27 +02:00

u2f.py

Update license header (#5540)

2025-10-10 15:32:46 +02:00

urls.py

Rename confusingly named helpers for URL generation (#6280)

2026-06-22 09:11:55 +02:00