https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:50:10 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-04199 bdu:2022-04199 https://cve.radiocsirt.org/vuln/bdu:2022-04199 https://cve.radiocsirt.org/vuln/bit-django-2022-34265 <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.</p> <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.</p> https://cve.radiocsirt.org/vuln/bit-django-2022-34265 https://cve.radiocsirt.org/vuln/cnvd-2022-49971 cnvd-2022-49971 https://cve.radiocsirt.org/vuln/cnvd-2022-49971 https://cve.radiocsirt.org/vuln/euvd-2026-216033 EUVD-2026-216033 https://cve.radiocsirt.org/vuln/euvd-2026-216033 https://cve.radiocsirt.org/vuln/fkie_cve-2022-34265 <p>An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.</p> <p>An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-34265 https://cve.radiocsirt.org/vuln/ghsa-p64x-8rxx-wf6q <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The `Trunc()` and `Extract()` database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The `Trunc()` and `Extract()` database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.</p> https://cve.radiocsirt.org/vuln/ghsa-p64x-8rxx-wf6q https://cve.radiocsirt.org/vuln/gsd-2022-34265 gsd-2022-34265 https://cve.radiocsirt.org/vuln/gsd-2022-34265 https://cve.radiocsirt.org/vuln/jvndb-2022-000053 <p>Django provided by Django Software Foundation is a Web application framework. Extract and Trunc functions of Django used to treat date data contain an SQL injection vulnerability(CWE-89). Takuto Yoshikai of Aeye Security Lab reported this vulnerability to the developer and coordinated. After coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership.</p> <p>Django provided by Django Software Foundation is a Web application framework. Extract and Trunc functions of Django used to treat date data contain an SQL injection vulnerability(CWE-89). Takuto Yoshikai of Aeye Security Lab reported this vulnerability to the developer and coordinated. After coordination was completed, this case was reported to IPA, and JPCERT/CC coordinated with the developer for the publication under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2022-000053 https://cve.radiocsirt.org/vuln/opensuse-su-2024:12172-1 <p>python310-Django-4.0.6-1.1 on GA media</p> <p>python310-Django-4.0.6-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:12172-1 https://cve.radiocsirt.org/vuln/pysec-2022-213 <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.</p> <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.</p> https://cve.radiocsirt.org/vuln/pysec-2022-213 https://cve.radiocsirt.org/vuln/rhsa-2022:5738 <p>python-django: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments</p> <p>python-django: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments</p> https://cve.radiocsirt.org/vuln/rhsa-2022:5738 https://cve.radiocsirt.org/vuln/suse-su-2022:3338-1 <p>Security update for ardana-ansible, ardana-cobbler, grafana, openstack-heat-templates, openstack-murano, python-Django, rabbitmq-server, rubygem-puma</p> <p>Security update for ardana-ansible, ardana-cobbler, grafana, openstack-heat-templates, openstack-murano, python-Django, rabbitmq-server, rubygem-puma</p> https://cve.radiocsirt.org/vuln/suse-su-2022:3338-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-34265 <p><strong>Affected:</strong> Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django</p> <p>An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.</p> <p><strong>Affected:</strong> Ubuntu:18.04:LTS: python-django, Ubuntu:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django</p> <p>An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-34265 https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0847 <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente Django ausnutzen, um Dateien zu manipulieren.</p> <p>Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux in der Komponente Django ausnutzen, um Dateien zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2022-0847