Django security reporting update

{
  "id": "bf02bdf869b917b0aa05a86577086b5084b2b07c1f57f6f9fdb33986bfdb8ab7",
  "url": "https://www.djangoproject.com/weblog/2026/oct/08/django-security-reporting-update/",
  "method": "llm",
  "payload": {
    "kind": "other",
    "title": "Django security reporting update",
    "summary": "Django is no longer accepting new security reports through HackerOne; existing reports remain open, and new issues should be reported by email or through the Django security policies.",
    "evidence": "We are no longer accepting new security reports for the Django project through HackerOne. Existing reports submitted through HackerOne will remain open and continue to be handled by the Django Security Team. If you discover a security issue in Django, please follow the reporting process described in the Django security policies. Security issues should be reported by emailing security@djangoproject.com",
    "products": [
      {
        "name": {
          "value": "Django",
          "evidence": "We are no longer accepting new security reports for the Django project through HackerOne."
        },
        "prerequisites": [],
        "fixed_versions": [],
        "affected_versions": []
      }
    ],
    "severity": "unknown",
    "fixed_cves": [],
    "related_cves": [],
    "security_relevant": true,
    "severity_evidence": null
  },
  "source_id": "official-django-weblog",
  "document_id": 23436,
  "published_at": "2026-10-08T11:00:00+00:00"
}