The Django project is very good about keeping the framework up-to-date and secure. They just released Django 1.11.27, and I’ve updated the Ironwood master branches in all repos to use it.
BTW: this is the kind of chore that people in the community could take on…