https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 04:03:42 +0000 https://cve.radiocsirt.org/vuln/bdu:2024-10874 bdu:2024-10874 https://cve.radiocsirt.org/vuln/bdu:2024-10874 https://cve.radiocsirt.org/vuln/bit-django-2024-53908 <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.has_key lookup via __ are unaffected.)</p> <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.has_key lookup via __ are unaffected.)</p> https://cve.radiocsirt.org/vuln/bit-django-2024-53908 https://cve.radiocsirt.org/vuln/euvd-2026-206299 EUVD-2026-206299 https://cve.radiocsirt.org/vuln/euvd-2026-206299 https://cve.radiocsirt.org/vuln/fkie_cve-2024-53908 <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.has_key lookup via __ are unaffected.)</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.has_key lookup via __ are unaffected.)</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-53908 https://cve.radiocsirt.org/vuln/ghsa-m9g8-fxxm-xg86 <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.has_key lookup via __ are unaffected.)</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.has_key lookup via __ are unaffected.)</p> https://cve.radiocsirt.org/vuln/ghsa-m9g8-fxxm-xg86 https://cve.radiocsirt.org/vuln/oesa-2024-2539 <p><strong>Affected:</strong> openEuler:24.03-LTS: python-django</p> <p>A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): A vulnerability was found in the Django Web Framework. The strip_tags() and stripbtags template filter may be vulnerable to a potential denial of service (DoS) in cases of a large sequence of nested incomplete HTML entities.(CVE-2024-53907) A vulnerability was found in the Django Web Framework. The direct usage of django.db.models.fields.json.HasKey may be vulnerable to SQL injection if untrusted data is used to perform queries.(CVE-2024-53908)</p> <p><strong>Affected:</strong> openEuler:24.03-LTS: python-django</p> <p>A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es): A vulnerability was found in the Django Web Framework. The strip_tags() and stripbtags template filter may be vulnerable to a potential denial of service (DoS) in cases of a large sequence of nested incomplete HTML entities.(CVE-2024-53907) A vulnerability was found in the Django Web Framework. The direct usage of django.db.models.fields.json.HasKey may be vulnerable to SQL injection if untrusted data is used to perform queries.(CVE-2024-53908)</p> https://cve.radiocsirt.org/vuln/oesa-2024-2539 https://cve.radiocsirt.org/vuln/opensuse-su-2024:14565-1 <p>python310-Django4-4.2.17-1.1 on GA media</p> <p>python310-Django4-4.2.17-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2024:14565-1 https://cve.radiocsirt.org/vuln/pysec-2024-157 <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.has_key lookup via __ are unaffected.)</p> <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.has_key lookup via __ are unaffected.)</p> https://cve.radiocsirt.org/vuln/pysec-2024-157 https://cve.radiocsirt.org/vuln/rhsa-2024:11144 <p>django: Potential denial-of-service in django.utils.html.strip_tags() django: Potential SQL injection in HasKey(lhs, rhs) on Oracle</p> <p>django: Potential denial-of-service in django.utils.html.strip_tags() django: Potential SQL injection in HasKey(lhs, rhs) on Oracle</p> https://cve.radiocsirt.org/vuln/rhsa-2024:11144 https://cve.radiocsirt.org/vuln/suse-su-2024:4285-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/suse-su-2024:4285-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-53908 <p><strong>Affected:</strong> Ubuntu:24.04:LTS: python-django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.has_key lookup via __ are unaffected.)</p> <p><strong>Affected:</strong> Ubuntu:24.04:LTS: python-django</p> <p>An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs value. (Applications that use the jsonfield.has_key lookup via __ are unaffected.)</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2024-53908 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3609 <p>Ein anonymer Angreifer kann mehrere Schwachstellen in Django ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder Daten zu manipulieren.</p> <p>Ein anonymer Angreifer kann mehrere Schwachstellen in Django ausnutzen, um einen Denial-of-Service-Zustand zu erzeugen oder Daten zu manipulieren.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2024-3609