SQL Injection

🗓️ 11 Feb 2026 08:27:59Reported by Veracode Vulnerability DatabaseType

veracode

veracode🔗 sca.analysiscenter.veracode.com👁 3 Views

Django exposes SQL injection in RasterField lookups for PostGIS due to improper band index sanitization.

Reporter	Title	Published	Views	Family All 118
GithubExploit	Exploit for SQL Injection in Djangoproject Django	26 Apr 202602:54	–	githubexploit
ATTACKERKB	CVE-2026-1207	3 Feb 202614:35	–	attackerkb
AlpineLinux	CVE-2026-1207	3 Feb 202614:35	–	alpinelinux
Chainguard	CVE-2026-1207 vulnerabilities	5 Feb 202601:17	–	cgr
Circl	CVE-2026-1207	3 Feb 202615:53	–	circl
CNNVD	Django 安全漏洞	3 Feb 202600:00	–	cnnvd
CVE	CVE-2026-1207	3 Feb 202614:35	–	cve
Cvelist	CVE-2026-1207 Potential SQL injection via raster lookups on PostGIS	3 Feb 202614:35	–	cvelist
Debian	[SECURITY] [DLA 4484-1] python-django security update	19 Feb 202619:46	–	debian
Debian	[SECURITY] [DSA 6150-1] python-django security update	26 Feb 202621:47	–	debian

Vulners

Node

django_project djangoRange1.10a1–4.2.27python

OR

django_project djangoRange5.0a1–5.2.10python

OR

django_project djangoRange6.0a1–6.0.1python

OR

django_project djangoMatch6.0python

OR

django_project djangoMatch6.0a1python

OR

django_project djangoMatch6.0b1python

OR

django_project djangoMatch6.0rc1python

OR

django_project djangoMatch5.2python

OR

django_project djangoMatch5.2.1python

OR

django_project djangoMatch5.2.2python

OR

django_project djangoMatch5.2.3python

OR

django_project djangoMatch5.2.4python

OR

django_project djangoMatch5.2.5python

OR

django_project djangoMatch5.2.6python

OR

django_project djangoMatch5.2.7python

OR

django_project djangoMatch5.2.8python

OR

django_project djangoMatch5.2.9python

OR

django_project djangoMatch5.2a1python

OR

django_project djangoMatch5.2b1python

OR

django_project djangoMatch5.2rc1python

OR

django_project djangoMatch4.2python

OR

django_project djangoMatch4.2.1python

OR

django_project djangoMatch4.2.10python

OR

django_project djangoMatch4.2.11python

OR

django_project djangoMatch4.2.12python

OR

django_project djangoMatch4.2.13python

OR

django_project djangoMatch4.2.14python

OR

django_project djangoMatch4.2.15python

OR

django_project djangoMatch4.2.16python

OR

django_project djangoMatch4.2.17python

OR

django_project djangoMatch4.2.18python

OR

django_project djangoMatch4.2.19python

OR

django_project djangoMatch4.2.2python

OR

django_project djangoMatch4.2.20python

OR

django_project djangoMatch4.2.21python

OR

django_project djangoMatch4.2.22python

OR

django_project djangoMatch4.2.23python

OR

django_project djangoMatch4.2.24python

OR

django_project djangoMatch4.2.25python

OR

django_project djangoMatch4.2.26python

OR

django_project djangoMatch4.2.3python

OR

django_project djangoMatch4.2.4python

OR

django_project djangoMatch4.2.5python

OR

django_project djangoMatch4.2.6python

OR

django_project djangoMatch4.2.7python

OR

django_project djangoMatch4.2.8python

OR

django_project djangoMatch4.2.9python

OR

django_project djangoMatch4.2a1python

OR

django_project djangoMatch4.2b1python

OR

django_project djangoMatch4.2rc1python

Source	Link
docs	www.docs.djangoproject.com/en/dev/releases/security/
djangoproject	www.djangoproject.com/weblog/2026/feb/03/security-releases/
github	www.github.com/django/django/commit/81aa5292967cd09319c45fe2c1a525ce7b6684d8
djangoproject	www.djangoproject.com/weblog/2026/feb/03/security-releases/
groups	www.groups.google.com/g/django-announce
docs	www.docs.djangoproject.com/en/dev/releases/security/
github	www.github.com/advisories/GHSA-mwm9-4648-f68q

09 May 2026 05:38Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.15.4

EPSS0.05295

SSVC

Django SQL injection Raster Field PostGIS band index sanitization