Since CVE-2018-14574 and CVE-2019-3498 affect 1.11, it is very likely they also apply to 1.8. However, Django 1.8 has reached EOL in April 2018 and the patches were not backported.
This fixes CVE-2018-7536 and CVE-2018-7537: https://www.djangoproject.com/weblog/2018/mar/06/security-releases/ cc https://github.com/NixOS/nixpkgs/issues/52679