The vulnerability of the QuerySet and Q objects in the Django software development platform allows attackers to disclose and modify sensitive information.

Django QuerySet and Q objects flaw exposes and alters protected data via unsafe _connector handling.

Reporter	Title	Published	Views	Family All 114
GithubExploit	Exploit for SQL Injection in Djangoproject Django	11 Dec 202511:47	–	githubexploit
GithubExploit	Exploit for SQL Injection in Djangoproject Django	8 Jan 202613:51	–	githubexploit
GithubExploit	Exploit for SQL Injection in Djangoproject Django	1 Dec 202503:34	–	githubexploit
GithubExploit	Exploit for SQL Injection in Djangoproject Django	5 Dec 202503:38	–	githubexploit
GithubExploit	Exploit for SQL Injection in Djangoproject Django	11 Dec 202511:55	–	githubexploit
GithubExploit	Exploit for SQL Injection in Djangoproject Django	21 Nov 202522:13	–	githubexploit
AlpineLinux	CVE-2025-64459	5 Nov 202515:09	–	alpinelinux
Information Security Automation	About SQL Injection – Django (CVE-2025-64459) vulnerability	26 Nov 202511:24	–	avleonov
Information Security Automation	November Linux Patch Wednesday	21 Nov 202516:21	–	avleonov
IBM Security Bulletins	Security Bulletin: Denial-of-service attack, SQL injection, and other vulnerabilities might affect IBM Storage Defender - Resiliency Service	8 Dec 202516:59	–	ibm

Vulners

Node

django djangoRange5.2–5.2.8

django djangoRange5.1–5.1.14

django djangoRange4.2–4.2.26

Source	Link
docs	www.docs.djangoproject.com/en/dev/releases/security/
djangoproject	www.djangoproject.com/weblog/2025/nov/05/security-releases
github	www.github.com/django/django/commit/06dd38324ac3d60d83d9f3adabf0dcdf423d2a85
github	www.github.com/django/django/commit/6703f364d767e949c5b0e4016433ef75063b4f9b
github	www.github.com/django/django/commit/72d2c87431f2ae0431d65d0ec792047f078c8241
github	www.github.com/django/django/commit/59ae82e67053d281ff4562a24bbba21299f0a7d4
shivasurya	www.shivasurya.me/security/django/2025/11/07/django-sql-injection-CVE-2025-64459.html
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
web	www.web.nvd.nist.gov/view/vuln/detail

02 Dec 2025 00:00Current

7.3High risk

Vulners AI Score7.3

CVSS 39.1

CVSS 29.4

EPSS0.1914