Django vulnerable to SQL injection via _connector keyword argument in QuerySet and Q objects.

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods QuerySet.filter, QuerySet.exclude, and QuerySet.get, and the class Q, are subject to SQL injection when using a suitably crafted dictionary, with dictionary expansion, as the connector argument...

PYSEC-2025-108

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods QuerySet.filter, QuerySet.exclude, and QuerySet.get, and the class Q, are subject to SQL injection when using a suitably crafted dictionary, with dictionary expansion, as the connector argument...

CVE-2025-64459 Potential SQL injection via _connector keyword argument in QuerySet and Q objects

An issue was discovered in 5.1 before 5.1.14, 4.2 before 4.2.26, and 5.2 before 5.2.8. The methods QuerySet.filter, QuerySet.exclude, and QuerySet.get, and the class Q, are subject to SQL injection when using a suitably crafted dictionary, with dictionary expansion, as the connector argument...

CVE-2025-52602

CVE-2025-52602 affects HCL BigFix Query WebUI Query, where an HTTP GET endpoint may disclose discoverable data such as group names and active user names/IDs via the /api/v1/query endpoint. This exposure could enable targeted phishing or social engineering. The available connected documents confir...

[SECURITY] Fedora 43 Update: rust-get-size2-0.7.0-2.fc43

Determine the size in bytes an object occupies inside RAM...

HCL BigFix Query 安全漏洞

HCL BigFix Query is a module for querying and collecting system status data in real-time from HCL India. A security vulnerability exists in HCL BigFix Query that stems from an HTTP GET endpoint request in the WebUI Query application returning a discoverable response that could disclose the group...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989481)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989481 advisory. In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't return unset power in ieee80211gettxpower We can get a UBSAN warning if...

Unity Linux 20.1050e Security Update: kernel (UTSA-2025-989929)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989929 advisory. In the Linux kernel, the following vulnerability has been resolved: scsi: target: tcmu: Fix possible page UAF tcmutrygetdatapage looks up pages under cmdrlock, but i...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990030)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990030 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .getmodes The duplicated EDID is never freed. Fix it. Tenable...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989123)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989123 advisory. In the Linux kernel, the following vulnerability has been resolved: pinctrl: renesas: rzn1: Fix possible null-ptr-deref in shpfcmapresources It will cause...

Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2025-990173)

"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990173 advisory. In the Linux kernel, the following vulnerability has been resolved: net: tun: Fix memory leaks of napigetfrags kmemleak reports after running testprogs: unreference...

Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989330)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989330 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos: hdmi: report safe 640x480 mode as a fallback when no EDID found When reading EDID fai...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988997)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988997 advisory. In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX: Always make an attempt to map eVMCS after migration When enlightened VMCS is in use an...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989376)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989376 advisory. In the Linux kernel, the following vulnerability has been resolved: usb: host: ohci-tmio: check return value after calling platformgetresource It will cause...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-990190)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990190 advisory. In the Linux kernel, the following vulnerability has been resolved: drm/exynos/vidi: fix memory leak in .getmodes The duplicated EDID is never freed. Fix it. Tenable...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988936)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988936 advisory. In the Linux kernel, the following vulnerability has been resolved: USB: host: isp116x: check return value after calling platformgetresource It will cause...

Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-989334)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989334 advisory. In the Linux kernel, the following vulnerability has been resolved: net: mdio: validate parameter addr in mdiobusgetphy The caller may pass any value as addr, what m...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988814)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988814 advisory. In the Linux kernel, the following vulnerability has been resolved: enetc: Fix illegal access when reading affinityhint irqsetaffinityhit stores a reference to the...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989732)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989732 advisory. In the Linux kernel, the following vulnerability has been resolved: thermal/drivers/broadcom: Fix potential NULL dereference in srthermalprobe platformgetresource ma...

Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989156)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989156 advisory. In the Linux kernel, the following vulnerability has been resolved: NFS: Fix a potential NULL dereference in nfsgetclient None of the callers are expecting NULL...