backstage-oauth2 (>=0.1.7, <=0.1.8), dbaas-aclapi (>=0.1.17, <=1.0.14) +4 more potentially affected by CVE-2015-2317 via django (>=1.5.12, <=1.6.10)

django PYPI version =1.5.12, =0.1.7, =0.1.17, =0.10.0, =0.10.2 - django-pesapal 0.2.0 - salmon 0.2.0 Source cves: CVE-2015-2317 Source advisory: GHSA-7FQ8-4PV5-5W5C...

django-canary-endpoint (0.1.2), django-debug-toolbar (>=0.10.0, <=0.10.2) potentially affected by CVE-2021-33203 via django (1.5.12)

django PYPI version 1.5.12 is affected by a known vulnerability. The following packages have a transitive dependency on django and may be impacted: - django-canary-endpoint 0.1.2 - django-debug-toolbar =0.10.0, =0.10.2 Source cves: CVE-2021-33203 Source advisory: OSV:GHSA-68W8-QJQ3-2GFM...

django-zero (0.0.1), farmdrop (>=0.2.0, <=1.1.0.dev2) +6 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=1.4.0, <=1.9.1)

django-debug-toolbar PYPI version =1.4.0, =0.2.0, =3.1.1, =0.1.0a0, =0.6.0, =1.0.0, =3.4.0 Source cves: CVE-2021-30459 Source advisory: GHSA-PGHF-347X-C2GJ...

GHSA-PGHF-347X-C2GJ SQL Injection via in django-debug-toolbar

Impact With Django Debug Toolbar attackers are able to execute SQL by changing the rawsql input of the SQL explain, analyze or select forms and submitting the form. NOTE: This is a high severity issue for anyone using the toolbar in a production environment. Generally the Django Debug Toolbar tea...

label-studio (>=1.1.0rc0, <=1.2.0), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (3.2.0)

django-debug-toolbar PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0rc0, =1.2.0 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2021-30459 Source advisory: GHSA-PGHF-347X-C...

mc4ep-lavender (>=0.8.0, <=0.17.0), muses-lpdp (>=0.2.2, <=0.4.0rc1590080566) +2 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=2.1.0, <=2.2.0)

django-debug-toolbar PYPI version =2.1.0, =0.8.0, =0.2.2, =0.1.2, =0.1.6 Source cves: CVE-2021-30459 Source advisory: OSV:GHSA-PGHF-347X-C2GJ...

django-zero (0.0.1), farmdrop (>=0.2.0, <=1.1.0.dev2) +6 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=1.4.0, <=1.9.1)

django-debug-toolbar PYPI version =1.4.0, =0.2.0, =3.1.1, =0.1.0a0, =0.6.0, =1.0.0, =3.4.0 Source cves: CVE-2021-30459 Source advisory: OSV:GHSA-PGHF-347X-C2GJ...

mc4ep-lavender (>=0.8.0, <=0.17.0), muses-lpdp (>=0.2.2, <=0.4.0rc1590080566) +2 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=2.1.0, <=2.2.0)

django-debug-toolbar PYPI version =2.1.0, =0.8.0, =0.2.2, =0.1.2, =0.1.6 Source cves: CVE-2021-30459 Source advisory: GHSA-PGHF-347X-C2GJ...

label-studio (>=1.1.0rc0, <=1.2.0), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (3.2.0)

django-debug-toolbar PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0rc0, =1.2.0 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2021-30459 Source advisory:...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

PYSEC-2021-10

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

mc4ep-lavender (>=0.8.0, <=0.17.0), muses-lpdp (>=0.2.2, <=0.4.0rc1590080566) +2 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=2.1.0, <=2.2.0)

django-debug-toolbar PYPI version =2.1.0, =0.8.0, =0.2.2, =0.1.2, =0.1.6 Source cves: CVE-2021-30459 Source advisory: OSV:PYSEC-2021-10...

label-studio (>=1.1.0rc0, <=1.2.0), thenewboston-ml-dev (0.2.3) potentially affected by CVE-2021-30459 via django-debug-toolbar (3.2.0)

django-debug-toolbar PYPI version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on django-debug-toolbar and may be impacted: - label-studio =1.1.0rc0, =1.2.0 - thenewboston-ml-dev 0.2.3 Source cves: CVE-2021-30459 Source advisory: OSV:PYSEC-2021-1...

Sql injection

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

django-zero (0.0.1), farmdrop (>=0.2.0, <=1.1.0.dev2) +6 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=1.4.0, <=1.9.1)

django-debug-toolbar PYPI version =1.4.0, =0.2.0, =3.1.1, =0.1.0a0, =0.6.0, =1.0.0, =3.4.0 Source cves: CVE-2021-30459 Source advisory: OSV:PYSEC-2021-10...

CVE-2021-30459

CVE-2021-30459 affects Django Debug Toolbar (Jazzband) with a SQL injection in the SQL Panel. The vulnerability allows attackers to execute arbitrary SQL by modifying the raw_sql input in the SQL explain, analyze, or select forms. Affected versions are Django Debug Toolbar before 1.11.1, 2.x befo...

CVE-2021-30459

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the rawsql input field of the SQL explain, analyze, or select form...

django-zero (0.0.1), farmdrop (>=0.2.0, <=1.1.0.dev2) +6 more potentially affected by CVE-2021-30459 via django-debug-toolbar (>=1.4.0, <=1.9.1)

django-debug-toolbar PYPI version =1.4.0, =0.2.0, =3.1.1, =0.1.0a0, =0.6.0, =1.0.0, =3.4.0 Source cves: CVE-2021-30459 Source advisory: MEND:CVE-2021-30459...