# FIXED: Django 5.2.19 (security release of 2026-11-03, the latest 5.2.x when this
# lab was written). 5.2.6 was the FIRST release that fixed CVE-2025-57833, but later
# 5.2.x releases fixed the same root cause on other paths (CVE-2025-59681 in 5.2.7,
# CVE-2025-13372 in 5.2.9, CVE-2026-1287 and CVE-2026-1312 in 5.2.11), so pin a
# current 5.2.x. https://docs.djangoproject.com/en/5.2/releases/security/
Django==5.2.19
