Django Security Releases, Symfony Path Bypass, Postman's Silent AI Plugins: Developer News for November 5, 2026

The first days of November 2026 brought security fixes that touch two of the most popular web stacks for students and freelancers: Django on the Python side and Symfony's HTTP component on the PHP side (the same component used under the hood by Laravel and Drupal). At the same time, a popular API tool was caught quietly wiring itself into developers' AI coding assistants, and the big AI companies kept buying up coding startups.

Here is a plain-English summary of each story, why it matters to you, and links to the official sources so you can read the details yourself.

1. Django 6.1.3, 6.0.10 and 5.2.19 Fix Six Security Issues

On November 3, the Django team released Django 6.1.3, 6.0.10 and 5.2.19 and asked all users to upgrade as soon as possible. The releases fix six CVEs. One is rated "moderate" and the rest "low" under Django's security policy:

• CVE-2026-108147: multipart uploads sent with Content-Transfer-Encoding: base64 could be buffered entirely in memory, ignoring FILE_UPLOAD_MAX_MEMORY_SIZE. A large upload could eat your server's RAM.
• CVE-2026-113593: UpdateCacheMiddleware and cache_page() used the same cache key for a request that left out a header listed in Vary and one that sent it empty, which could serve one user's cached response to another.
• CVE-2026-113733: admin users with only "view" permission could see the full password hash on some custom user models (6.1 and 6.0 only).
• Three GeoDjango issues, including the "moderate" one (CVE-2026-111362): GeoJSON geometries could reference a coordinate system by URL, and because GDAL resolves those URLs, user input could make the server send requests or read files. A related fix (CVE-2026-114582) stops SpatialReference from loading URLs and file paths, and needs GDAL 3.9 or later for full protection.

According to the Django 6.1.3 release notes, this release also adds compatibility with Python 3.15.

What to do: if your capstone or client project runs Django, check your version and upgrade within your release series:

python -m django --version
pip install --upgrade "django==6.1.3"
pip freeze > requirements.txt

Use 6.0.10 or 5.2.19 instead if you are on those series. Then run your tests or at least click through login, file uploads and any cached pages.

2. Symfony HttpFoundation Bug Lets Requests Slip Past Web Server Path Rules

On November 4, Fabien Potencier published security advisory GHSA-3h27-hjv7-fqjx for the Symfony HTTP Foundation component. Since an earlier fix, Request::getPathInfo() stripped the script name from the start of the URL even when it was only part of a longer segment. With SCRIPT_NAME set to /index.php, a request for /index.phpadmin was routed like /admin.

Symfony's own access_control rules and firewalls are not affected, because they read the same path as the router. The risk is for rules enforced in front of PHP: an nginx location /admin block, an Apache section, or a CDN or WAF rule on /admin could be bypassed.

The affected ranges are 5.4.50 to before 5.4.56, 6.4.29 to before 6.4.50, 7.3.7 to before 7.4.23, and 8.x before 8.1.11. Fixed versions are 5.4.56, 6.4.50, 7.4.23 and 8.1.11. Laravel, Drupal and many other PHP frameworks pull this component in through Composer, so check what you actually have installed:

composer show symfony/http-foundation
composer update symfony/http-foundation --with-dependencies

If you protect an admin area only with a web server or WAF rule, this is a good reminder to also check permissions inside the application itself.

3. Postman Desktop Installed AI Agent Plugins Without Asking

A GitHub issue titled "Desktop auto-installs Codex/Claude plugins; installer attempts to trust its own startup hook" became one of the most discussed developer stories of the week. The reporter showed Postman's own log on a Mac running Postman desktop 12.33.4: an auto-existing-upgrade step installed Postman plugins into Claude Code and Codex, added a Postman CLI to ~/.local/bin, pointed Codex at a remote MCP server, and registered a session-start hook telling the agent to load a Postman skill for almost any API task. The installer source also contains code that marks Postman's own hook as trusted.

Other users in the thread reported the same behavior on later builds and in GitHub Copilot's settings. The reporter was careful to say the evidence shows unwanted configuration changes, not data being sent anywhere. In the thread, a reply posted for Postman said the plugins are bundled to make setup easier, that this is mentioned on the download page and in the update flow, and that the company will "make the opt-in clearer, especially for existing users" and review the hook behavior.

What to do: if you use Postman and an AI coding assistant, open ~/.codex/config.toml, ~/.claude/settings.json and your Copilot settings and remove anything you did not install yourself. The bigger lesson: your coding agent now has a configuration you need to audit, just like your browser extensions.

4. OpenAI and Meta Both Buy AI Coding Startups

On November 4, OpenAI announced it will acquire Pierre Computer Company, the team behind Code Storage and the Trees and Diffs libraries already used for browsing files and reviewing changes in the Codex app. OpenAI said Pierre's open-source projects will stay open source, and that the deal still needs regulatory approval. The same week, OpenAI described Pando, its in-house Git-compatible backend for engineers and agents.

The same day, TechCrunch reported that Meta acquired Conductor, a startup that runs several AI coding agents in parallel workspaces. Conductor's founder said the core features will keep working until early next year, but its cloud service shuts down on November 20, after which user cloud data will be deleted. If you use Conductor's cloud, export your work before then.

5. Cognition Releases SWE-2 Flash, a Smaller and Cheaper Coding Model

Also on November 4, Cognition introduced SWE-2 Flash, a coding model built on Thinking Machines' Inkling-Small base model. Cognition says it is available in Devin Desktop and the CLI at one-fifth the price and three times the speed of its larger SWE-2 model, and that it is building a program to share the weights with industry partners and researchers. The company's pitch is that smaller models can now handle a lot of routine agent work, such as code review, documentation updates and small features.

What This Means for You

• Patch your frameworks this week. Upgrade Django to 6.1.3, 6.0.10 or 5.2.19, and make sure symfony/http-foundation is at a fixed version in your PHP projects.
• Don't rely only on server rules for security. The Symfony bug shows why an admin page needs its own login and permission checks inside the app.
• Audit your AI tools. Know which plugins, hooks and MCP servers your coding assistant loads, and remove the ones you didn't choose.
• Watch where your code lives. When a tool you depend on is acquired, read the shutdown dates and export your data early.

Conclusion

This week's theme is control: control over which framework versions run on your server, which paths your web server really blocks, and which tools are allowed to change your AI assistant's behavior. Most of the fixes take only a few minutes, so do them today. Check the official links above for the full details, and come back for our next developer news roundup.