Skip to content
OpenAdvisories
High RHSA-2025:17499 1 CVE

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2 (python-django20) security update

Published Oct 8, 2025 · Updated Jun 29, 2026

Ecosystem: Red Hat

Fixed packages 2

ReleasePackageFixed in
Red Hat · OpenStack 16 openstack:16.2::el8 python-django20 0:2.0.13-20.el8ost
Red Hat · OpenStack 16 openstack:16.2::el8 python3-django20 0:2.0.13-20.el8ost

Vulnerabilities 1

  • High 7.1
    CVE-2025-57833 Public exploit EPSS 28%

    Django is subject to SQL injection through its column aliases

    An issue was discovered in Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6. FilteredRelation is subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed QuerySet.annot…

    djangoproject Django python-django django Debian Ubuntu Alpine PyPI

References

  • article
    https://access.redhat.com/security/updates/classification/#important
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=2392990
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17499.json
  • report
    https://access.redhat.com/security/cve/CVE-2025-57833
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2025-57833
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2025-57833
  • article
    https://docs.djangoproject.com/en/dev/releases/security/
  • article
    https://groups.google.com/g/django-announce
  • article
    https://www.djangoproject.com/weblog/2025/sep/03/security-releases/