Most recent entries from all

bdu:2021-03557

BIT-django-2021-35042

Affected: Bitnami: django

Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.

cnvd-2021-49046

EUVD-2026-29069

fkie_cve-2021-35042

Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.

GHSA-xpfp-f569-q3p2 — SQL Injection in Django

Affected: PyPI: Django

Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.

gsd-2021-35042

openSUSE-SU-2024:11205-1 — python36-Django-3.2.7-2.3 on GA media

python36-Django-3.2.7-2.3 on GA media

PYSEC-2021-109

Affected: PyPI: django

Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.