CVE-2024-53908

A SQL injection vulnerability exists in the Django web framework (versions 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17). The flaw occurs when using the django.db.models.fields.json.HasKey lookup with an Oracle database if untrusted data is provided as a lhs value . This vulnerabili...