Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2021-35042
9.8
CRITICALCVSS v3
Published
July 2, 2021
CVSS v2
7.5 HIGH
Affected
9 projects
Assigned by
MITRE
Severity scale
010
Description
Django 3.1.x before 3.1.13 and 3.2.x before 3.2.5 allows QuerySet.order_by SQL injection if order_by is untrusted input from a client of a web application.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.>= 3.2, < 3.2.5, >= 3.1, < 3.1.13NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.>= 3.2, < 3.2.5, >= 3.1, < 3.1.13NVD
django
Docker Hub
NPM
Crates.io
RubyGems