Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-34265
9.8
CRITICALCVSS v3
Published
July 4, 2022
CVSS v2
7.5 HIGH
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.
django/django
GitHubThe Web framework for perfectionists with deadlines.
GitHubThe Web framework for perfectionists with deadlines.>= 4.0, < 4.0.6, >= 3.2, < 3.2.14NVD
DjangoPython Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.
Python Package IndexA high-level Python web framework that encourages rapid development and clean, pragmatic design.>= 4.0, < 4.0.6, >= 3.2, < 3.2.14NVD
django
Docker Hub
NPM