Yup, it's not the first time either -- we've coordinated with them in the past when fixing bugs that affect both frameworks (https://www.djangoproject.com/weblog/2011/feb/08/security/).