EUVD-2025-1606

Malicious code in bioql PyPI...

EUVD-2022-3592

Malicious code in bioql PyPI...

EUVD-2022-7566

Malicious code in bioql PyPI...

EUVD-2024-3298

Malicious code in bioql PyPI...

EUVD-2022-7292

Malicious code in bioql PyPI...

EUVD-2025-12481

Malicious code in bioql PyPI...

EUVD-2025-20338

Malicious code in bioql PyPI...

EUVD-2021-29524

Malicious code in bioql PyPI...

EUVD-2024-2999

Malicious code in bioql PyPI...

EUVD-2025-6526

Malicious code in bioql PyPI...

EUVD-2025-26368

Malicious code in bioql PyPI...

EUVD-2024-47862

Malicious code in bioql PyPI...

EUVD-2022-1241

Malicious code in bioql PyPI...

EUVD-2021-30050

Malicious code in bioql PyPI...

SUSE SLES15 / openSUSE 15 Security Update : python-Django (SUSE-SU-2025:03446-1)

The remote SUSE Linux SLES15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:03446-1 advisory. - CVE-2025-59681: SQL injection via the QuerySet annotate, alias, aggregate, or extra methods when processing a specially crafte...

SUSE CVE-2025-59682

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract function, used by the "startapp --template" and "startproject --template" commands, allows partial directory traversal via an archive with file paths sharing a common...

SUSE-SU-2025:03446-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2025-59681: SQL injection via the QuerySet annotate, alias, aggregate, or extra methods when processing a specially crafted dictionary with dictionary expansion bsc1250485. - CVE-2025-59682: directory traversal via the...

Django 4.x < 4.2.25, 5.0.x < 5.1.13, 5.2.x < 5.2.7 Multiple Vulnerabilities - Windows

Django is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if descriptio...

GHSA-Q95W-C7QG-HRFF Django vulnerable to partial directory traversal via archives

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract function, used by the "startapp --template" and "startproject --template" commands, allows partial directory traversal via an archive with file paths sharing a common...

Django vulnerable to partial directory traversal via archives

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. The django.utils.archive.extract function, used by the "startapp --template" and "startproject --template" commands, allows partial directory traversal via an archive with file paths sharing a common...