EUVD-2025-7193

Malicious code in bioql PyPI...

EUVD-2023-58372

Malicious code in bioql PyPI...

EUVD-2025-5993

Malicious code in bioql PyPI...

EUVD-2023-34985

Malicious code in bioql PyPI...

EUVD-2025-24035

Malicious code in bioql PyPI...

EUVD-2023-2522

Malicious code in bioql PyPI...

EUVD-2022-0960

Malicious code in bioql PyPI...

EUVD-2022-1374

Malicious code in bioql PyPI...

EUVD-2023-2802

Malicious code in bioql PyPI...

EUVD-2025-19601

Malicious code in bioql PyPI...

EUVD-2022-29591

Malicious code in bioql PyPI...

EUVD-2025-6496

Malicious code in bioql PyPI...

EUVD-2024-0293

Malicious code in bioql PyPI...

EUVD-2025-15999

Malicious code in bioql PyPI...

EUVD-2023-58438

Malicious code in bioql PyPI...

CVE-2025-59681

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...

Django 4.x < 4.2.25, 5.0.x < 5.1.13, 5.2.x < 5.2.7 Multiple Vulnerabilities - Linux

Django is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if descriptio...

Django 4.x < 4.2.25, 5.0.x < 5.1.13, 5.2.x < 5.2.7 Multiple Vulnerabilities - Windows

Django is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:djangoproject:django"; if descriptio...

SQL Injection

Overview Affected versions of this package are vulnerable to SQL Injection in the QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra methods when a specially crafted dictionary is passed using dictionary expansion as kwargs, leading to unsafe column aliases on MySQL and...

PYSEC-2025-106

An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...