A minor problem was discovered with Django's use of flup for FastCGI handling after the 0.95 release; flup 
was allowed to run in 'debug' mode and show full tracebacks on uncaught exceptions, which could expose 
the contents of application code or settings.

This was fixed in revision 4170 of Django trunk, and a patch which applies cleanly to stock Django 0.95 is 
in Django's "0.95-bugfixes" branch (which tracks post-release updates and fixes for the 0.95 release):

http://code.djangoproject.com/changeset/4363