Skip to content
OpenAdvisories
Critical RHSA-2022:5738 1 CVE

Red Hat Security Advisory: Django 3.2.14 Security Update

Published Sep 16, 2024 · Updated May 21, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · Rhui 4 rhui:4::el8 python-django 0:3.2.14-3.el8ui
Red Hat · Rhui 4 rhui:4::el8 python38-django 0:3.2.14-3.el8ui

Vulnerabilities 1

  • Critical 9.8
    CVE-2022-34265 Public exploit EPSS 74%

    Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection

    An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind cho…

    python-django django python-django py3-django Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2102896
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2022/rhsa-2022_5738.json
  • report
    https://access.redhat.com/security/cve/CVE-2022-34265
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2022-34265
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2022-34265