https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T19:50:37.593408+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-02671 bdu:2022-02671 2026-10-02T19:50:38.053735+00:00 bdu:2022-02671 https://cve.radiocsirt.org/vuln/bit-django-2022-28346 BIT-django-2022-28346 2026-10-02T19:50:38.053786+00:00

Affected: Bitnami: django

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.

 https://cve.radiocsirt.org/vuln/cnvd-2022-31838 cnvd-2022-31838 2026-10-02T19:50:38.053822+00:00 cnvd-2022-31838 https://cve.radiocsirt.org/vuln/euvd-2026-216020 EUVD-2026-216020 2026-10-02T19:50:38.053836+00:00 EUVD-2026-216020 https://cve.radiocsirt.org/vuln/fkie_cve-2022-28346 fkie_cve-2022-28346 2026-10-02T19:50:38.053848+00:00

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.

 https://cve.radiocsirt.org/vuln/ghsa-2gwj-7jmv-h26r GHSA-2gwj-7jmv-h26r — SQL Injection in Django 2026-10-02T19:50:38.053869+00:00

Affected: PyPI: Django

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. `QuerySet.annotate()`, `aggregate()`, and `extra()` methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed `**kwargs`.

 https://cve.radiocsirt.org/vuln/gsd-2022-28346 gsd-2022-28346 2026-10-02T19:50:38.053893+00:00 gsd-2022-28346 https://cve.radiocsirt.org/vuln/oesa-2022-1642 OESA-2022-1642 — python-django security update 2026-10-02T19:50:38.053904+00:00

Affected: openEuler:20.03-LTS-SP1: python-django, openEuler:20.03-LTS-SP3: python-django, openEuler:22.03-LTS: python-django

A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.(CVE-2022-28346) A SQL injection issue was discovered in QuerySet.explain() in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. This occurs by passing a crafted dictionary (with dictionary expansion) as the **options argument, and placing the injection payload in an option name.(CVE-2022-28347)

 https://cve.radiocsirt.org/vuln/opensuse-su-2023:0005-1 openSUSE-SU-2023:0005-1 — Security update for python-Django 2026-10-02T19:50:38.053932+00:00

Security update for python-Django

 https://cve.radiocsirt.org/vuln/pysec-2022-190 PYSEC-2022-190 2026-10-02T19:50:38.053957+00:00

Affected: PyPI: django

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.

 https://cve.radiocsirt.org/vuln/rhsa-2022:5115 RHSA-2022:5115 — Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-django20) security update 2026-10-02T19:50:38.053976+00:00

Django: SQL injection in QuerySet.annotate(),aggregate() and extra()

 https://cve.radiocsirt.org/vuln/suse-su-2022:3338-1 SUSE-SU-2022:3338-1 — Security update for ardana-ansible, ardana-cobbler, grafana, openstack-heat-templates, openstack-murano, python-Django,… 2026-10-02T19:50:38.053993+00:00

Security update for ardana-ansible, ardana-cobbler, grafana, openstack-heat-templates, openstack-murano, python-Django, rabbitmq-server, rubygem-puma

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-28346 UBUNTU-CVE-2022-28346 2026-10-02T19:50:38.054012+00:00

Affected: Ubuntu:Pro:14.04:LTS: python-django, Ubuntu:Pro:16.04:LTS: python-django, Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django

An issue was discovered in Django 2.2 before 2.2.28, 3.2 before 3.2.13, and 4.0 before 4.0.4. QuerySet.annotate(), aggregate(), and extra() methods are subject to SQL injection in column aliases via a crafted dictionary (with dictionary expansion) as the passed **kwargs.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0439 WID-SEC-W-2022-0439 — Red Hat OpenStack: Mehrere Schwachstellen 2026-10-02T19:50:38.054034+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Red Hat OpenStack ausnutzen, um Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren und einen Denial-of-Service-Zustand zu verursachen.