4 matches found
CVE-2025-59681: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate, QuerySet.alias, QuerySet.aggregate, and QuerySet.extra are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the kwarg...
Exploit for SQL Injection in Djangoproject Django
CVE-2022-28346 A flaw was found in the Django package, which l...
Updated python-django packages fix security vulnerability
Potential SQL injection in QuerySet.annotate, aggregate, and extra CVE-2022-28346 Potential SQL injection via QuerySet.explainoptions on PostgreSQL QuerySet.explain CVE-2022-28347...