Django 6.0.7 release notes

July 7, 2026

Django 6.0.7 fixes three security issues with severity “low” and one bug in 6.0.6.

Bugfixes

  • Fixed a regression in Django 6.0 where the PBKDF2 and MD5 password hashers raised UnicodeDecodeError for bytes passwords that were not valid UTF-8. Passwords supplied as str or as UTF-8 bytes are unaffected (#37184).

« previous | up | next »