CVE-2025-57833

CVE-2025-57833 CVE-2025–57833에 대한 예시 취약 애플리케이션 Django 4.2 4.2.24 이전 버전, 5.1 5.1.12 이전 버전, 5.2 5.2.6 이전 버전은 Dictionary 확장을 통해 kwargs가 QuerySet.annotate 또는 QuerySet.alias에 전달될 때 SQL 인젝션에 취약합니다. 현재 작업 진행 중입니다. 교육 목적으로만 제공됩니다...

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: python-django (UTSA-2026-006300)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-006300 advisory. An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a...

DEBIAN-CVE-2025-57833

An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed QuerySet.annotate or QuerySet.alias...