Internet Bug Bounty: CVE-2024-42005: Potential SQL injection in QuerySet.values() and values_list()
CVE-2024-42005: Potential SQL injection in QuerySet.values and valueslist A vulnerability was discovered in Django where the QuerySet.values and valueslist methods on models with a JSONField were subject to SQL injection in column aliases via a crafted JSON object key as a passed argument...