PyPI/django-debug-toolbar CVE-2021-30459: unknown, EPSS 1.94%
A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the raw_sql input f
Action: Upgrade django-debug-toolbar to 1.11.1 or later.
pip install django-debug-toolbar==1.11.1pip install django-debug-toolbar==2.2.1pip install django-debug-toolbar==3.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.10.0 | 1.11.1 | - |
| 2.0 | 2.2.1 | - |
| 3.0 | 3.2.1 | - |
Fixed versions
| 1.11.1 | 2.2.1 | 3.2.1 |
Sources
- osv: PYSEC-2021-10
- https://github.com/jazzband/django-debug-toolbar/security/advisories/GHSA-pghf-347x-c2gj
- https://www.djangoproject.com/weblog/2021/apr/14/debug-toolbar-security-releases/
- https://github.com/jazzband/django-debug-toolbar/releases
CVE-2021-30459 · published · modified · JSON