EUVD-2025-200249

An issue was discovered in 5.2 before 5.2.9, 5.1 before 5.1.15, and 4.2 before 4.2.27. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed to QuerySet.annotate or QuerySet.alias on PostgreSQL. Earlier...

The vulnerability of the annotate() and alias() functions in the Django web application framework allows a hacker to execute arbitrary code.

The vulnerability of the LoginView, LogoutView, and setlanguage functions in the Django web application framework is related to the unlimited distribution of resources. Exploiting this vulnerability could allow a malicious actor to cause service failures remotely...

SQL Injection

Overview activerecord is a library for databases on Rails. Affected versions of this package are vulnerable to SQL Injection due to improper sanitization of comments passed via annotate, optimzerhints methods, or via the QueryLogs interface, which adds annotations automatically. Exploiting this...