This fixes CVE-2018-7536 and CVE-2018-7537: https://www.djangoproject.com/weblog/2018/mar/06/security-releases/ cc https://github.com/NixOS/nixpkgs/issues/52679