FreeBSD : Django -- multiple vulnerabilities (0db8684f-8938-11f0-8325-bc2411f8eb0b)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the 0db8684f-8938-11f0-8325-bc2411f8eb0b advisory. Django reports: CVE-2025-57833: Potential SQL injection in FilteredRelation column aliases. Tenable has...

OPENSUSE-SU-2025:15527-1 python311-Django-5.2.6-1.1 on GA media

These are all security issues fixed in the python311-Django-5.2.6-1.1 package on the GA media of openSUSE Tumbleweed...

OPENSUSE-SU-2025:15528-1 python311-Django4-4.2.24-1.1 on GA media

These are all security issues fixed in the python311-Django4-4.2.24-1.1 package on the GA media of openSUSE Tumbleweed...

SUSE CVE-2025-57833

An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed QuerySet.annotate or QuerySet.alias...

CVE-2025-55242 Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability

...

CVE-2025-55242 Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability

...

CVE-2025-55242

CVE-2025-55242 affects Xbox Gaming Services/Xbox (Xbox Certification Bug Copilot Djando Information Disclosure Vulnerability). Description: exposure of sensitive information to an unauthorized actor over a network. Affected component is related to Xbox Gaming Services; root cause described as an ...

Security update for python-Django

This update for python-Django fixes the following issues: CVE-2025-57833: Fixed potential SQL injection in FilteredRelation column aliases bsc1248810 Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternative...

SUSE-SU-2025:03074-1 Security update for python-Django

This update for python-Django fixes the following issues: - CVE-2025-57833: Fixed potential SQL injection in FilteredRelation column aliases bsc1248810...

Django 4.x < 4.2.24, 5.0.x < 5.1.12, 5.2.x < 5.2.6 SQLi Vulnerability - Linux

Django is prone to an SQL injection SQLi vulnerability in FilteredRelation column aliases. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

Django 4.x < 4.2.24, 5.0.x < 5.1.12, 5.2.x < 5.2.6 SQLi Vulnerability - Windows

Django is prone to an SQL injection SQLi vulnerability in FilteredRelation column aliases. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

PYSEC-2025-105

An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed QuerySet.annotate or QuerySet.alias...

CVE-2025-57833

An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed QuerySet.annotate or QuerySet.alias...

PYSEC-2025-105

An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed QuerySet.annotate or QuerySet.alias...

SQL Injection

Overview Django is a high-level Python Web framework that encourages rapid development and clean, pragmatic design. Affected versions of this package are vulnerable to SQL Injection in the FilteredRelation class when a specially crafted dictionary is used with dictionary expansion as the kwargs...

USN-7736-1 python-django vulnerability

It was discovered that Django incorrectly handled certain inputs. An attacker could possibly use this issue to perform a SQL injection...

USN-7736-1: Django vulnerability

It was discovered that Django incorrectly handled certain inputs. An attacker could possibly use this issue to perform a SQL injection...

Django SQL注入漏洞

Django is a set of open source web application framework based on Python language from Django Foundation. The framework includes an object-oriented mapper, a view system, a template system, and more. An SQL injection vulnerability exists in Django versions prior to 4.2.24, prior to 5.1.12, and...

CVE-2025-57833

An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed QuerySet.annotate or QuerySet.alias...

CVE-2025-57833

CVE-2025-57833 affects Django 4.2 (pre-4.2.24), 5.1 (pre-5.1.12), and 5.2 (pre-5.2.6). The vulnerability arises in FilteredRelation where SQL injection can occur via column aliases when a crafted dictionary is expanded through **kwargs passed to QuerySet.annotate() or QuerySet.alias(). The issue ...