December 2, 2025
Django 4.2.27 fixes one security issue with severity “high”, one security issue with severity “moderate”, and one bug in 4.2.26.
Fixed a regression in Django 4.2.26 where DisallowedRedirect was raised
by HttpResponseRedirect and
HttpResponsePermanentRedirect for URLs longer than 2048
characters. The limit is now 16384 characters (#36743).
Nov 30, 2025