https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T20:32:59.885027+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2022-04199 bdu:2022-04199 2026-10-02T20:33:00.027310+00:00 bdu:2022-04199 https://cve.radiocsirt.org/vuln/bit-django-2022-34265 BIT-django-2022-34265 2026-10-02T20:33:00.027367+00:00

Affected: Bitnami: django

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.

 https://cve.radiocsirt.org/vuln/cnvd-2022-49971 cnvd-2022-49971 2026-10-02T20:33:00.027404+00:00 cnvd-2022-49971 https://cve.radiocsirt.org/vuln/euvd-2026-216033 EUVD-2026-216033 2026-10-02T20:33:00.027418+00:00 EUVD-2026-216033 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34265 fkie_cve-2022-34265 2026-10-02T20:33:00.027429+00:00

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.

 https://cve.radiocsirt.org/vuln/ghsa-p64x-8rxx-wf6q GHSA-p64x-8rxx-wf6q — Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection 2026-10-02T20:33:00.027452+00:00

Affected: PyPI: Django

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The `Trunc()` and `Extract()` database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.

 https://cve.radiocsirt.org/vuln/gsd-2022-34265 gsd-2022-34265 2026-10-02T20:33:00.027493+00:00 gsd-2022-34265 https://cve.radiocsirt.org/vuln/jvndb-2022-000053 jvndb-2022-000053 2026-10-02T20:33:00.027514+00:00

Django provided by Django Software Foundation is a Web application framework. Extract and Trunc functions of Django used to treat date data contain an SQL injection vulnerability(CWE-89). Takuto Yoshikai of Aeye Security Lab reported this vulnerability to the developer and coordinated. After coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership.

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12172-1 openSUSE-SU-2024:12172-1 — python310-Django-4.0.6-1.1 on GA media 2026-10-02T20:33:00.027596+00:00

python310-Django-4.0.6-1.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2022-213 PYSEC-2022-213 2026-10-02T20:33:00.027620+00:00

Affected: PyPI: django

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.

 https://cve.radiocsirt.org/vuln/rhsa-2022:5738 RHSA-2022:5738 — Red Hat Security Advisory: Django 3.2.14 Security Update 2026-10-02T20:33:00.027642+00:00

python-django: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments

 https://cve.radiocsirt.org/vuln/suse-su-2022:3338-1 SUSE-SU-2022:3338-1 — Security update for ardana-ansible, ardana-cobbler, grafana, openstack-heat-templates, openstack-murano, python-Django,… 2026-10-02T20:33:00.027661+00:00

Security update for ardana-ansible, ardana-cobbler, grafana, openstack-heat-templates, openstack-murano, python-Django, rabbitmq-server, rubygem-puma

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-34265 UBUNTU-CVE-2022-34265 2026-10-02T20:33:00.027685+00:00

Affected: Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django

An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0847 WID-SEC-W-2022-0847 — Red Hat Enterprise Linux (Django): Schwachstelle ermöglicht Manipulation von Dateien 2026-10-02T20:33:00.027709+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente Django ausnutzen, um Dateien zu manipulieren.