CVE-2026-1312-Testing

CVE-2026-1312 Reproduction Clone the Repository Setup Requirements: Python 3.12 installed Docker Desktop installed and running Run the Script ./runcve20261312.sh Files runcve20261312.sh Main execution script docker-compose.yml Docker configuration .dockerfile Docker image setup requirements.txt...

Fedora: Security Advisory (FEDORA-2026-3adb735295)

The remote host is missing an update for the SPDX-FileCopyrightText: 2026 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2026-1312 vulnerabilities

Vulnerabilities for packages: label-studio, authentik-fips, authentik, awx...

Python Library Django 4.2.x < 4.2.28 / 5.2.x < 5.2.11 / 6.0.x < 6.0.2 Multiple Vulnerabilities

The detected version of the Django Python package, Django, is 4.2.x prior to 4.2.28, 5.2.x prior to 5.2.11, or 6.0.x prior to 6.0.2. It is, therefore, affected by multiple vulnerabilities as referenced by security release advisory: - The django.contrib.auth.handlers.modwsgi.checkpassword function...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +150 more potentially affected by CVE-2026-1312 via django (>=4.2.0a1, <=4.2.27)

django PYPI version =4.2.0a1, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.17.1 and more Source cves: CVE-2026-1312 Source advisory: SNYK:PYTHON-DJANGO-15198931...

arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +62 more potentially affected by CVE-2026-1312 via django (>=5.2.0a1, <=5.2.10)

django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2026-1312 Source advisory: OSV:GHSA-6426-9FV3-65X8...

arches (8.0.0a1), bravoserver (3.1.0) +27 more potentially affected by CVE-2026-1312 via django (>=6.0.0a1, <=6.0.1)

django PYPI version =6.0.0a1, =1.1.0, =0.1.0, =0.1.0b2, =0.2.0b1 and more Source cves: CVE-2026-1312 Source advisory: OSV:GHSA-6426-9FV3-65X8...

arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +62 more potentially affected by CVE-2026-1312 via django (>=5.2.0a1, <=5.2.10)

django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2026-1312 Source advisory: GHSA-6426-9FV3-65X8...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +150 more potentially affected by CVE-2026-1312 via django (>=4.2.0a1, <=4.2.27)

django PYPI version =4.2.0a1, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.17.1 and more Source cves: CVE-2026-1312 Source advisory: GHSA-6426-9FV3-65X8...

arches (8.0.0a1), bravoserver (3.1.0) +27 more potentially affected by CVE-2026-1312 via django (>=6.0.0a1, <=6.0.1)

django PYPI version =6.0.0a1, =1.1.0, =0.1.0, =0.1.0b2, =0.2.0b1 and more Source cves: CVE-2026-1312 Source advisory: GHSA-6426-9FV3-65X8...

DEBIAN-CVE-2026-1312

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. .QuerySet.orderby is subject to SQL injection in column aliases containing periods when the same alias is, using a suitably crafted dictionary, with dictionary expansion, used in FilteredRelation. Earlier,...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +150 more potentially affected by CVE-2026-1312 via django (>=4.2.0, <=4.2.27)

django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.17.1 and more Source cves: CVE-2026-1312 Source advisory: OSV:PYSEC-2026-47...

bravoserver (3.1.0), creadoc (0.0.10) +19 more potentially affected by CVE-2026-1312 via django (>=6.0.0, <=6.0.1)

django PYPI version =6.0.0, =1.1.0, =0.1.0b2, =0.1.2, =0.20.4, =0.22.1 - docker-compose-control-center 5.0.0 - hyperpony 0.84.0 and more Source cves: CVE-2026-1312 Source advisory: OSV:PYSEC-2026-47...

CVE-2026-1312

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. .QuerySet.orderby is subject to SQL injection in column aliases containing periods when the same alias is, using a suitably crafted dictionary, with dictionary expansion, used in FilteredRelation. Earlier,...

arches (8.0.0a1), bravoserver (3.1.0) +27 more potentially affected by CVE-2026-1312 via django (>=6.0.0a1, <=6.0.1)

django PYPI version =6.0.0a1, =1.1.0, =0.1.0, =0.1.0b2, =0.2.0b1 and more Source cves: CVE-2026-1312 Source advisory: MEND:CVE-2026-1312...

admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +150 more potentially affected by CVE-2026-1312 via django (>=4.2.0a1, <=4.2.27)

django PYPI version =4.2.0a1, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =1.3.9, =0.4.0, =0.0.1, =4.16.2, =4.17.1 and more Source cves: CVE-2026-1312 Source advisory: MEND:CVE-2026-1312...

arthexis (>=0.1.3, <=0.2.3), cdm-ecommerce-backend (0.1.0) +62 more potentially affected by CVE-2026-1312 via django (>=5.2.0a1, <=5.2.10)

django PYPI version =5.2.0a1, =0.1.3, =0.1.0, =0.1.0, =1.3.0, =0.1.0, =2025.7.0, =1.5.7, =1.5.10 - django-heartbeat 2.2.3 - django-heralder 0.4.2 and more Source cves: CVE-2026-1312 Source advisory: MEND:CVE-2026-1312...

CVE-2026-1312

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. .QuerySet.orderby is subject to SQL injection in column aliases containing periods when the same alias is, using a suitably crafted dictionary, with dictionary expansion, used in FilteredRelation. Earlier,...

CVE-2026-1312

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. .QuerySet.orderby is subject to SQL injection in column aliases containing periods when the same alias is, using a suitably crafted dictionary, with dictionary expansion, used in FilteredRelation. Earlier,...

UBUNTU-CVE-2026-1312

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. .QuerySet.orderby is subject to SQL injection in column aliases containing periods when the same alias is, using a suitably crafted dictionary, with dictionary expansion, used in FilteredRelation. Earlier,...