In one of our projects, we are using Django web framework. But, we are currently stuck at 1.6.11 (mainly because in 1.7 Python 2.6 support was dropped - we are working on it, but it's going very slow) which is not maintained anymore. No security fixes have been applied to 1.6 for quite a long time.
I'd like to facilitate the upgrade process by proving the management that we have a problem from a security perspective.
Could you recommend me a strategy/way to demonstrate/prove that using Django 1.6 is not safe anymore?