# Django 6.0.2 documentation

# Django 5.1.7 release notes

March 6, 2025

Django 5.1.7 fixes a security issue with severity “moderate” and several bugs in 5.1.6.

## CVE-2025-26699: Potential denial-of-service vulnerability in `django.utils.text.wrap()`

The `wrap()` and `wordwrap` template filter were subject to a potential denial-of-service attack when used with very long strings.

## Bugfixes

- Fixed a bug in Django 5.1 where the `{% querystring %}` template tag returned an empty string rather than `"?"` when all parameters had been removed from the query string (#36182).

- Fixed a bug in Django 5.1 where `FileSystemStorage`, with `allow_overwrite` set to `True`, did not truncate the overwritten file content (#36191).

- Fixed a regression in Django 5.1 where the `count` and `exists` methods of `ManyToManyField` related managers would always return `0` and `False` when the intermediary model back references used `to_field` (#36197).

- Fixed a regression in Django 5.1 where the `pre_save` and `post_save` signals for `LogEntry` were not sent when deleting a single object in the admin (#36217).