[ANNOUNCE] Django security advisory: Vulnerability in password reset (master branch only)

[Tim Graham]

We don't normally give security advisories for issues that affect only
the master branch, but in this case we've made an exception as the issue
could be high impact.

Please see the blog post for details:
https://www.djangoproject.com/weblog/2016/nov/21/passwordresetconfirmview-security-advisory/

[William Hakizimana]

While we are at it, could we implement these NIST new password guidelines into django? Just