Wagtail

Latest version: v6.4.1

Safety actively analyzes 723685 Python packages for vulnerabilities to keep your Python projects secure.

Scan your dependencies

Page 13 of 34

2.15.4

Not secure
~~~~~~~~~~~~~~~~~~~

* Fix: Fix issue where invalid bulk action URLs would incorrectly trigger a server error (500) instead of a valid not found (404) (Ihor Marhitych)
* Fix: Fix issue where bulk actions would not work for object IDs greater than 999 when `USE_THOUSAND_SEPARATOR` (Dennis McGregor)
* Fix: Fix syntax when logging image rendition generation (Jake Howard)

2.15.3

Not secure
~~~~~~~~~~~~~~~~~~~

* Fix: Implement correct check for SQLite installations without full-text search support (Matt Westcott)

2.15.2

Not secure
~~~~~~~~~~~~~~~~~~~

* Fix: CVE-2022-21683 - Comment reply notifications sent to incorrect users (Ihor Marhitych, Jacob Topp-Mugglestone)
* Fix: Transform operations in Filter.run() when image has been re-oriented (Justin Michalicek)
* Fix: Remove extraneous header action buttons when creating or editing workflows and tasks (Matt Westcott)
* Fix: Ensure that bulk publish actions pick up the latest draft revision (Matt Westcott)
* Fix: Ensure the `checkbox_aria_label` is used correctly in the Bulk Actions checkboxes (Vu Pham)
* Fix: Prevent error on MySQL search backend when searching three or more terms (Aldán Creo)
* Fix: Allow wagtail.search app migrations to complete on versions of SQLite without full-text search support (Matt Westcott)
* Fix: Update Pillow dependency to allow 9.x (Matt Westcott)

2.15.1

Not secure
~~~~~~~~~~~~~~~~~~~

* Fix: Fix syntax when logging image rendition generation (Jake Howard)
* Fix: Increase version range for django-filter dependency (Serafeim Papastefanos)
* Fix: Prevent bulk action checkboxes from displaying on page reports and other non-explorer listings (Matt Westcott)
* Fix: Fix errors on publishing pages via bulk actions (Matt Westcott)
* Fix: Fix `csrf_token` issue when using the Approve or Unlock buttons on pages on the Wagtail admin home (Matt Westcott)

2.15

Not secure
~~~~~~~~~~~~~~~~~~~~~

* Implemented a new database search backend that supports the FTS features of the database in use (Developed by Aldán Creo. Mentored by Karl Hobley and Cynthia Kiser. Funded by Google Summer of Code)
* Added bulk actions in the Wagtail Admin for Pages, Users, Images and Documents (Developed by Shohan Dutta Roy. Mentored by Dan Braghis, Jacob Topp-Mugglestone, and Storm Heg.)
* Extended audit logging to all models and added a history view for snippets and ModelAdmin (Matt Westcott. Sponsored by The Motley Fool)
* Allow granting collection management permissions over individual collections (Cynthia Kiser)
* Added `TypedTableBlock` block type for StreamField, for building tables with mixed data types (Matt Westcott, Coen van der Kamp, Scott Cranfill. Sponsored by YouGov)
* Add the ability for the page chooser to convert external urls that match a page to internal links (Jacob Topp-Mugglestone. Sponsored by The Motley Fool)
* Added "Extending Wagtail" section to documentation (Matt Westcott)
* Introduced template components, a standard mechanism for renderable objects in the admin (Matt Westcott)
* Support `min_num` / `max_num` options on ListBlock (Matt Westcott)
* Implemented automatic tree synchronization for `contrib.simple_translation` (Mitchel Cabuloy)
* Added a `background_position_style` property to renditions (Karl Hobley)
* Added a distinct `wagtail.copy_for_translation` log action type (Karl Hobley)
* Add a debug logger around image rendition generation (Jake Howard)
* Convert Documents and Images to class based views for easier overriding (Matt Westcott)
* Isolate admin URLs for Documents and Images search listing results with the name `'listing_results'` (Matt Westcott)
* Removed `request.is_ajax()` usage in Documents, Image and Snippet views (Matt Westcott)
* Simplify generic admin view templates plus ensure `page_title` and `page_subtitle` are used consistently (Matt Westcott)
* Extend support for collapsing edit panels from just MultiFieldPanels to all kinds of panels (Fabien Le Frapper, Robbie Mackay)
* Add object count to header within modeladmin listing view (Jonathan "Yoni" Knoll)
* Add ability to return HTML in multiple image upload errors (Gordon Pendleton)
* Upgrade internal JS tooling; Node v14 plus other smaller package upgrades (LB (Ben Johnston))
* Add support for `non_field_errors` rendering in Workflow action modal (LB (Ben Johnston))
* Support calling `get_image_model` and `get_document_model` at import time (Matt Westcott)
* When copying a page, default the 'Publish copied page' field to false (Justin Slay)
* Open Preview and Live page links in the same tab, except where it would interrupt editing a Page (Sagar Agarwal)
* Added `ExcelDateFormatter` to `wagtail.admin.views.mixins` so that dates in Excel exports will appear in the locale's `SHORT_DATETIME_FORMAT` (Andrew Stone)
* Add TIDAL support to the list of oEmbed providers (Wout De Puysseleir)
* Add `label_format` attribute to customize the label shown for a collapsed StructBlock (Matt Westcott)
* User Group permissions will now show all custom object permissions in one row instead of a separate table (Kamil Marut)
* Create `ImageFileMixin` to extract shared file handling methods from `AbstractImage` and `AbstractRendition` (Fabien Le Frapper)
* Add `before_delete_page` and `register_permissions` examples to Hooks documentation (Jane Liu, Daniel Fairhead)
* Add clarity to modeladmin template override behavior in the documentation (Joe Howard, Dan Swain)
* Add section about CSV exports to security documentation (Matt Westcott)
* Add initial support for Django 4.0 deprecations (Matt Westcott, Jochen Wersdörfer)
* Move translations in `nl_NL` to `nl` (Loïc Teixeira, Coen van der Kamp)
* Add documentation for how to redirect to a separate page on Form builder submissions using ``RoutablePageMixin`` (Nick Smith)
* Refactored index listing views and made column sort-by headings more consistent (Matt Westcott)
* The title field on Image and Document uploads will now default to the filename without the file extension and this behavior can be customized (LB Johnston)
* Add support for Python 3.10 (Matt Westcott)
* Introduce, `autocomplete`, a separate method that performs partial matching on specific autocomplete fields. This is useful for suggesting pages to the user in real-time as they type their query. (Karl Hobley, Matt Westcott)
* Use SVG icons in modeladmin headers and StreamField buttons/headers (Jérôme Lebleu)
* Add tags to existing Django registered checks (LB Johnston)
* Upgrade admin frontend JS libraries jQuery to 3.6.0 (Fabien Le Frapper)
* Added `request.preview_mode` so that template rendering can vary based on preview mode (Andy Chosak)
* Fix: Delete button is now correct colour on snippets and modeladmin listings (Brandon Murch)
* Fix: Ensure that StreamBlock / ListBlock-level validation errors are counted towards error counts (Matt Westcott)
* Fix: InlinePanel add button is now keyboard navigatable (Jesse Menn)
* Fix: Remove redundant 'clear' button from site root page chooser (Matt Westcott)
* Fix: Make ModelAdmin IndexView keyboard-navigable (Saptak Sengupta)
* Fix: Prevent error on refreshing page previews when multiple preview tabs are open (Alex Tomkins)
* Fix: Multiple accessibility fixes for Windows high contrast mode; Admin fields, Dropdown button, Editor Tabs, Icon visibility, Page Editor field panels, sidebar menu, sidebar hamburger icon, sidebar search, streamfield, checkboxes (Dmitrii Faiazov, Chakita Muttaraju, Onkar Apte, Desai Akshata, LB (Ben Johnston), Amy Chan, Dan Braghis, Thibaud Colas, Shariq Jamil)
* Fix: Menu sidebar hamburger icon on smaller viewports now correctly indicates it is a button to screen readers and can be accessed via keyboard (Amy Chan, Dan Braghis)
* Fix: `blocks.MultipleChoiceBlock`, `forms.CheckboxSelectMultiple` and `ArrayField` checkboxes will now stack instead of display inline to align with all other checkboxes fields (Seb Brown)
* Fix: Screen readers can now access login screen field labels (Amy Chan)
* Fix: Admin breadcrumbs home icon now shows for users with access to a subtree only (Stefan Hammer)
* Fix: Add handling of invalid inline styles submitted to `RichText` so `ConfigException` is not thrown (Alex Tomkins)
* Fix: Ensure comment notifications dropdown handles longer translations without overflowing content (Krzysztof Jeziorny)
* Fix: Set `default_auto_field` in `postgres_search` `AppConfig` (Nick Moreton)
* Fix: Ensure admin tab JS events are handled on page load (Andrew Stone)
* Fix: `EmailNotificationMixin` and `send_notification` should only send emails to active users (Bryan Williams)
* Fix: Disable Task confirmation now shows the correct value for quantity of tasks in progress (LB Johnston)
* Fix: Page history now works correctly when it contains changes by a deleted user (Dan Braghis)
* Fix: Add `gettext_lazy` to `ModelAdmin` built in view titles so that language settings are correctly used (Matt Westcott)
* Fix: Tabbing and keyboard interaction on the Wagtail userbar now aligns with ARIA best practices (Storm Heg)
* Fix: Add full support for custom `edit_handler` usage by adding missing `bind_to` call to `PreviewOnEdit` view (Stefan Hammer)
* Fix: Only show active (not disabled) tasks in the workflow task chooser (LB Johnston)
* Fix: CSS build scripts now output to the correct directory paths on Windows (Vince Salvino)
* Fix: Capture log output from style fallback to avoid noise in unit tests (Matt Westcott)
* Fix: Switch widgets on/off states are now visually different for high-contrast mode users (Sakshi Uppoor)
* Fix: Nested InlinePanel usage no longer fails to save when creating two or more items (Indresh P, Rinish Sam, Anirudh V S)
* Fix: Changed relation name used for admin commenting from `comments` to `wagtail_admin_comments` to avoid conflicts with third-party commenting apps (Matt Westcott)
* Fix: CSS variables are now correctly used for the filtering menu in modeladmin (Noah H)
* Fix: Panel heading attribute is no longer ignored when nested inside a `MultiFieldPanel` (Jérôme Lebleu)

2.14.2

Not secure
~~~~~~~~~~~~~~~~~~~

* Fix: Allow relation name used for admin commenting to be overridden to avoid conflicts with third-party commenting apps (Matt Westcott)
* Fix: Corrected badly-formed format strings in translations (Matt Westcott)
* Fix: Page history now works correctly when it contains changes by a deleted user (Dan Braghis)

Page 13 of 34

© 2025 Safety CLI Cybersecurity Inc. All Rights Reserved.