CVE-2026-1312

CVE-2026-1312는 고위험 Django SQL 인젝션 취약점입니다. QuerySet.orderby에서 점.이 포함된 열 별칭을 사용하고, FilteredRelation과 함께 사전을 통한 동적 쿼리 구성이 결합될 때, 공격자가 악성 SQL을 주입할 수 있습니다. 영향을 받는 버전: Django 6.0 브랜치에서 6.0.2 이전 버전 Django 5.2 브랜치에서 5.2.11 이전 버전 Django 4.2 브랜치에서 4.2.28 이전 버전 환경 시작 이 취약점 프로젝트는 vscode의 devcontainer를 사용하여...

CVE-2025-57833

Уязвимость SQL-инъекции в Django FilteredRelation Alias CVE-2025-57833 Спустя год в Django обнаружили SQL-инъекцию. На первый взгляд, инъекция вызвана алиасом ведь алиас нельзя подготовить заранее Уязвимость затрагивает функциональность FilteredRelation в Django. При использовании методов...

SQL Injection

Django is vulnerable to SQL injection. The vulnerability is due to improper handling of column aliases containing periods in .QuerySet.orderby when used with FilteredRelation, where unsanitized alias values are included in generated SQL queries and attackers can exploit this by crafting a malicio...

MGASA-2026-0032 Updated python-django packages fix security vulnerabilities

Username enumeration through timing difference in modwsgi authentication handler. CVE-2025-13473 Potential denial-of-service vulnerability via repeated headers when using ASGI. CVE-2025-14550 Potential SQL injection via raster lookups on PostGIS. CVE-2026-1207 Potential denial-of-service...

CVE-2026-1287

An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. FilteredRelation is subject to SQL injection in column aliases via control characters, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed to QuerySet methods annotate, aggregat...

GHSA-38CW-85XC-XR9X Veramo is Vulnerable to SQL Injection in Veramo Data Store ORM

Summary An SQL injection vulnerability exists in the @veramo/data-store package that allows any authenticated user to execute arbitrary SQL queries against the database. The vulnerability is caused by insufficient validation of the column parameter in the order array of query requests. Details...

EUVD-2014-9089

Malware in sbrugna...

CVE-2025-59681

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...

PYSEC-2024-70

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values and valueslist methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed arg...

CVE-2014-9264

Stack-based buffer overflow in the .NET Data Provider in SAP SQL Anywhere allows remote attackers to execute arbitrary code via a crafted column alias...

Stack overflow

Stack-based buffer overflow in the .NET Data Provider in SAP SQL Anywhere allows remote attackers to execute arbitrary code via a crafted column alias...

CVE-2014-9264: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the .NET Data Provider in SAP SQL Anywhere allows remote attackers to execute arbitrary code via a crafted column alias...

PT-2014-8911

Name of the Vulnerable Software and Affected Versions SAP SQL Anywhere .NET Data Provider affected versions not specified Description The issue is related to a stack-based buffer overflow in the .NET Data Provider, allowing remote attackers to execute arbitrary code via a crafted column alias. Th...

SAP SQL Anywhere .NET Data Provider Column Alias Stack Buffer Overflow Code Execution Vulnerability

This allows attackers to execute arbitrary code on applications which pass user provided data to the vulnerable API in SAP SQL Anywhere. The specific flaw exists within the handling of column aliases. If an application allows untrusted input to be used as the column alias in a query, even if the...