https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:56:25 +0000 https://cve.radiocsirt.org/vuln/bdu:2025-11748 bdu:2025-11748 https://cve.radiocsirt.org/vuln/bdu:2025-11748 https://cve.radiocsirt.org/vuln/bit-django-2025-57833 <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().</p> <p><strong>Affected:</strong> Bitnami: django</p> <p>An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().</p> https://cve.radiocsirt.org/vuln/bit-django-2025-57833 https://cve.radiocsirt.org/vuln/euvd-2026-260040 EUVD-2026-260040 https://cve.radiocsirt.org/vuln/euvd-2026-260040 https://cve.radiocsirt.org/vuln/fkie_cve-2025-57833 <p>An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().</p> <p>An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-57833 https://cve.radiocsirt.org/vuln/ghsa-6w2r-r2m5-xq5w <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().</p> <p><strong>Affected:</strong> PyPI: Django</p> <p>An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().</p> https://cve.radiocsirt.org/vuln/ghsa-6w2r-r2m5-xq5w https://cve.radiocsirt.org/vuln/oesa-2025-2231 <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: python-django</p> <p>A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es):</p> <p>An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().(CVE-2025-57833)</p> <p><strong>Affected:</strong> openEuler:22.03-LTS-SP4: python-django</p> <p>A high-level Python Web framework that encourages rapid development and clean, pragmatic design. Security Fix(es):</p> <p>An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().(CVE-2025-57833)</p> https://cve.radiocsirt.org/vuln/oesa-2025-2231 https://cve.radiocsirt.org/vuln/opensuse-su-2025:15527-1 <p>python311-Django-5.2.6-1.1 on GA media</p> <p>python311-Django-5.2.6-1.1 on GA media</p> https://cve.radiocsirt.org/vuln/opensuse-su-2025:15527-1 https://cve.radiocsirt.org/vuln/pysec-2025-105 <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().</p> <p><strong>Affected:</strong> PyPI: django</p> <p>An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().</p> https://cve.radiocsirt.org/vuln/pysec-2025-105 https://cve.radiocsirt.org/vuln/rhsa-2025:16403 <p>django: Django SQL injection in FilteredRelation column aliases</p> <p>django: Django SQL injection in FilteredRelation column aliases</p> https://cve.radiocsirt.org/vuln/rhsa-2025:16403 https://cve.radiocsirt.org/vuln/suse-su-2025:03074-1 <p>Security update for python-Django</p> <p>Security update for python-Django</p> https://cve.radiocsirt.org/vuln/suse-su-2025:03074-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-57833 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django</p> <p>An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: python-django, Ubuntu:22.04:LTS: python-django, Ubuntu:24.04:LTS: python-django</p> <p>An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annotate() or QuerySet.alias().</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2025-57833 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1961 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Django ausnutzen, um eine SQL-Injection durchzuführen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Django ausnutzen, um eine SQL-Injection durchzuführen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-1961