Skip to content
OpenAdvisories

Package · Wolfi

py3-django

12 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.8

    Django SQL injection in HasKey(lhs, rhs) on Oracle

    An issue was discovered in Django 5.1 before 5.1.4, 5.0 before 5.0.10, and 4.2 before 4.2.17. Direct usage of the django.db.models.fields.json.HasKey lookup, when an Oracle database is used, is subject to SQL injection if untrusted data is used as an lhs valu…