Latest chirps
Wagtail Security team no longer accepts GPG-encrypted emails
You can still report Wagtail security issues via email — just not with GPG.
Wagtail's new Security Announcements Channel
Get notified of security releases for your favorite CMS
Check yourself before you wreck yourself with vibe coding
Tips to avoid becoming a vibe coding cautionary tale
Wagtail statement on WebP vulnerability
Wagtail sites with WebP support and Pillow < 10.0.1 are vulnerable when users upload a malicious image
Security releases - 2.7.2 and 2.8.1
Two security updates for Wagtail have been released - Wagtail 2.7.2 (for the LTS 2.7 branch) and Wagtail 2.8.1 (for the current 2.8 branch), to address a cross-site scripting (XSS) vulnerability on the page revision comparison view within the Wagtail admin interface.
Django security releases relevant to Wagtail sites
Maintaing a Django or Wagtail site? Today’s security releases are relevant to you