EUVD-2022-5508

Malicious code in bioql PyPI...

EUVD-2024-41431

Malicious code in bioql PyPI...

EUVD-2025-26182

Malicious code in bioql PyPI...

EUVD-2024-47420

Malicious code in bioql PyPI...

EUVD-2022-5229

Malicious code in bioql PyPI...

EUVD-2025-28881

Malicious code in bioql PyPI...

EUVD-2025-26641

Malicious code in bioql PyPI...

EUVD-2023-25069

Malicious code in bioql PyPI...

EUVD-2025-6169

Malicious code in bioql PyPI...

EUVD-2023-58930

Malicious code in bioql PyPI...

EUVD-2023-0225

Malicious code in bioql PyPI...

EUVD-2025-24411

Malicious code in bioql PyPI...

EUVD-2025-28816

Malicious code in bioql PyPI...

EUVD-2025-24033

Malicious code in bioql PyPI...

EUVD-2025-28829

Malicious code in bioql PyPI...

EUVD-2025-24036

Malicious code in bioql PyPI...

The vulnerabilities of the QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() methods in the Django web application framework allow attackers to influence the confidentiality and integrity of the protected information.

The vulnerability of the QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra methods in the Django web application framework is related to the lack of security measures for SQL query structures. Exploiting this vulnerability allows an attacker to influence the confidentialit...

The Alias feature in SnakeYAML before 1.26 allows entity expansion during a load operation, a related issue to CVE-2003-1564.

...

GHSA-HPR9-3M2G-3J9P Django vulnerable to SQL injection in column aliases

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...

PYSEC-2025-106

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...