15989 matches found
GHSA-M9G8-FXXM-XG86 Django SQL injection in HasKey(lhs, rhs) on Oracle
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. Applications that use the...
Django denial-of-service in django.utils.html.strip_tags()
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The striptags method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities...
Django SQL injection in HasKey(lhs, rhs) on Oracle
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. Applications that use the...
admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +137 more potentially affected by CVE-2024-53908 via django (>=4.2.0, <=4.2.16)
django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =0.4.0, =4.16.2, =4.8.0, =0.1.0, =0.138.3 and more Source cves: CVE-2024-53908 Source advisory: OSV:PYSEC-2024-157...
aldryn-django (5.0.2.0), artd-customer (>=0.0.20, <=0.0.23) +77 more potentially affected by CVE-2024-53908 via django (>=5.0.0, <=5.0.9)
django PYPI version =5.0.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2024-53908 Source advisory: OSV:PYSEC-2024-157...
bma (0.2.0a1), chromatrace (>=0.1.6, <=0.1.7) +30 more potentially affected by CVE-2024-53908 via django (>=5.1.0, <=5.1.3)
django PYPI version =5.1.0, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.0.86, =0.1.0, =5.1.0, =5.1.3 and more Source cves: CVE-2024-53908 Source advisory: OSV:PYSEC-2024-157...
CVE-2024-53908 vulnerabilities
Vulnerabilities for packages: py3-django, awx...
CVE-2024-53908 vulnerabilities
Vulnerabilities for packages: py3-django...
CVE-2024-53908
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. Applications that use the...
DEBIAN-CVE-2024-53908
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. Applications that use the...
PYSEC-2024-157
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. Applications that use the...
PYSEC-2024-157
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. Applications that use the...
admin-auth0 (>=0.1.1, <=0.1.5), alcali (3006.3.0) +137 more potentially affected by CVE-2024-53907 via django (>=4.2.0, <=4.2.16)
django PYPI version =4.2.0, =0.1.1, =4.2.6.0, =65.10.0, =7.5.0a0, =1.1.0a0, =1.0.2, =0.0.1, =0.4.0, =4.16.2, =4.8.0, =0.1.0, =0.138.3 and more Source cves: CVE-2024-53907 Source advisory: OSV:PYSEC-2024-156...
aldryn-django (5.0.2.0), artd-customer (>=0.0.20, <=0.0.23) +77 more potentially affected by CVE-2024-53907 via django (>=5.0.0, <=5.0.9)
django PYPI version =5.0.0, =0.0.20, =0.0.13, =0.0.19, =0.0.34, =0.0.50, =0.0.5, =0.0.11, =1.0.3, =0.1.0, =0.1.0, =1.0.0, =6.0.0, =6.3.3 and more Source cves: CVE-2024-53907 Source advisory: OSV:PYSEC-2024-156...
bma (0.2.0a1), chromatrace (>=0.1.6, <=0.1.7) +30 more potentially affected by CVE-2024-53907 via django (>=5.1.0, <=5.1.3)
django PYPI version =5.1.0, =0.1.6, =0.0.3, =0.0.15, =2.7.0, =0.92.0, =1.0.3, =0.6.2, =0.0.86, =0.1.0, =5.1.0, =5.1.3 and more Source cves: CVE-2024-53907 Source advisory: OSV:PYSEC-2024-156...
CVE-2024-53907 vulnerabilities
Vulnerabilities for packages: py3-django, awx...
CVE-2024-53907 vulnerabilities
Vulnerabilities for packages: py3-django...
CVE-2024-53907
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The striptags method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities...
PYSEC-2024-156
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The striptags method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities...
DEBIAN-CVE-2024-53907
An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. The striptags method and striptags template filter are subject to a potential denial-of-service attack via certain inputs containing large sequences of nested incomplete HTML entities...