Alpine/py3-django: critical 9.8
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name valu
Action: Upgrade py3-django to 3.2.14-r0 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 3.2.14-r0 | - |
Fixed versions
| 3.2.14-r0 |
Sources
- osv: ALPINE-CVE-2022-34265#Alpine:v3.19/py3-django
- https://security.alpinelinux.org/vuln/CVE-2022-34265
published · modified · JSON