Debian/python-django: critical 9.8
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name valu
Action: Upgrade python-django to 2:4.0.6-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2:4.0.6-1 | - |
Fixed versions
| 2:4.0.6-1 |
Sources
published · modified · JSON