Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-pv4p-cwwg-4rph: Django SQL injection vulnerability

An issue was discovered in Django 5.0 before 5.0.8 and 4.2 before 4.2.15. QuerySet.values() and values_list() methods on models with a JSONField are subject to SQL injection in column aliases via a crafted JSON object key as a passed *arg.

ghsa
#sql#vulnerability#js#git

Django SQL injection vulnerability

Critical severity GitHub Reviewed Published Aug 7, 2024 to the GitHub Advisory Database • Updated Aug 7, 2024

Related news

Red Hat Security Advisory 2024-6428-03

Red Hat Security Advisory 2024-6428-03 - An update is now available for Red Hat Ansible Automation Platform 2.4. Issues addressed include denial of service, memory exhaustion, remote SQL injection, and traversal vulnerabilities.