Fedora 44 Python-Django-Haystack Faces Critical Deserialization Risk

Haystack provides modular search for Django. It features a unified, familiar

API that allows you to plug in different search backends (such as Solr,

Elasticsearch, Whoosh, Xapian, etc.) without having to modify your code.

Haystack is BSD licensed, plays nicely with third-party app without needing to

modify the source and supports advanced features like faceting, More Like This,

highlighting, spatial search and spelling suggestions.

You can find more information at http://haystacksearch.org/.

Fixes GHSA-r3hx-x5rh-p9vv: via eval() in Elasticsearch Result Deserialization https://github.com/django-haystack/django- haystack/security/advisories/GHSA-r3hx-x5rh-p9vv What's Changed https://github.com/django-haystack/django-haystack/releases/tag/v3.4.0 Remove obsolete ElasticSearch2 support and tests by @claudep in https://github.com/django-haystack/django-haystack/pull/1978 Add Django v5.1 to the testing by @cclauss in https://github.com/django- haystack/django-haystack/pull/1991 GitHub Actions: Add Python 3.13 to the testing by @cclauss in https://github.com/django-haystack/django-haystack/pull/1997 Fix typo. by @andresmrm in https://github.com/django-haystack/django- haystack/pull/1998 Fix RelatedSearchQueryset.load_all() truncating results by @craigds in https://github.com/django-haystack/django-haystack/pull/2012 [FIXED] -- handle trailing slash in Solr index URL for core reload. by @DhavalGojiya in https://github.com/django-haystack/django-haystack/pull/1968...