We don't normally give security advisories for issues that affect only the master branch, but in this case we've made an exception as the issue could be high impact.
Please see the blog post for details: https://www.djangoproject.com/weblog/2016/nov/21/passwordresetconfirmview-security-advisory/ -- You received this message because you are subscribed to the Google Groups "django-announce" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-announce+unsubscr...@googlegroups.com. To post to this group, send email to django-announce@googlegroups.com. Visit this group at https://groups.google.com/group/django-announce. For more options, visit https://groups.google.com/d/optout.
