Поиск уязвимостей
Количество 10
Количество 10
CVE-2025-59681
An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods (on MySQL and MariaDB).
CVE-2025-59681
An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods (on MySQL and MariaDB).
CVE-2025-59681
An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods (on MySQL and MariaDB).
CVE-2025-59681
An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13 ...
GHSA-hpr9-3m2g-3j9p
Django vulnerable to SQL injection in column aliases
BDU:2025-12461
Уязвимость методов QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() программной платформы для веб-приложений Django, позволяющая нарушителю оказать влияние на конфиденциальность и целостность защищаемой информации
openSUSE-SU-2025:20022-1
Security update for python-Django
SUSE-SU-2025:03446-1
Security update for python-Django
ROS-20251106-04
Множественные уязвимости python3-django
ALT-PU-2026-8405
ALT-PU-2026-8405: package `python3-module-django` update to version 5.2.14-alt1
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2025-59681 An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods (on MySQL and MariaDB). | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
 | CVE-2025-59681 An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods (on MySQL and MariaDB). | CVSS3: 8.1 | 1% Низкий | около 1 года назад |
 | CVE-2025-59681 An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13, and 5.2 before 5.2.7. QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() are subject to SQL injection in column aliases, when using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods (on MySQL and MariaDB). | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
| CVE-2025-59681 An issue was discovered in Django 4.2 before 4.2.25, 5.1 before 5.1.13 ... | CVSS3: 9.8 | 1% Низкий | около 1 года назад |
| GHSA-hpr9-3m2g-3j9p Django vulnerable to SQL injection in column aliases | CVSS3: 7.1 | 1% Низкий | около 1 года назад |
 | BDU:2025-12461 Уязвимость методов QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), and QuerySet.extra() программной платформы для веб-приложений Django, позволяющая нарушителю оказать влияние на конфиденциальность и целостность защищаемой информации | CVSS3: 7.1 | 1% Низкий | около 1 года назад |
 | openSUSE-SU-2025:20022-1 Security update for python-Django | около 1 года назад | ||
| SUSE-SU-2025:03446-1 Security update for python-Django | около 1 года назад | ||
 | ROS-20251106-04 Множественные уязвимости python3-django | CVSS3: 7.1 | около 1 года назад | |
| ALT-PU-2026-8405 ALT-PU-2026-8405: package `python3-module-django` update to version 5.2.14-alt1 | CVSS3: 9.8 | 6 месяцев назад |
Уязвимостей на страницу