# Documentazione Django 5.2.8

# Note di rilascio di Django 1.10.8

5 Settembre 2017

Django 1.10.8 risolve un problema di sicurezza in 1.10.7.

## CVE-2017-12794: Possible XSS in traceback section of technical 500 debug page

In older versions, HTML autoescaping was disabled in a portion of the template for the technical 500 debug page. Given the right circumstances, this allowed a cross-site scripting attack. This vulnerability shouldn’t affect most production sites since you shouldn’t run with `DEBUG = True` (which makes this page accessible) in your production settings.