Skip to content
OpenAdvisories

Archive

2 July 2021

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2021-35042 Public exploit EPSS 44%

    SQL Injection in Django

    Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.