{"action":"Upgrade django to 1.11.23 or later.","affected":[{"fixed":"1.11.23","introduced":"1.11a1"},{"fixed":"2.1.11","introduced":"2.1a1"},{"fixed":"2.2.4","introduced":"2.2a1"}],"component":"django","cve_ids":["CVE-2019-14234"],"ecosystem":"PyPI","epss":0.47694,"exploited":false,"fixed_versions":["1.11.23","2.1.11","2.2.4"],"ghsa_id":"GHSA-6r97-cj55-9hrq","id":"tcs_01M5KF42GXN4ZQH4PYP67VVHGG","modified_at":"2025-02-21T05:50:19.980781Z","published_at":"2019-08-16T14:00:34Z","references":["https://osv.dev/vulnerability/GHSA-6r97-cj55-9hrq","https://nvd.nist.gov/vuln/detail/CVE-2019-14234","https://github.com/django/django/commit/4f5b58f5cd3c57fee9972ab074f8dc6895d8f387","https://github.com/django/django/commit/ed682a24fca774818542757651bfba576c3fc3ef","https://github.com/django/django/commit/f74b3ae3628c26e1b4f8db3d13a91d52a833a975","https://docs.djangoproject.com/en/dev/releases/security","https://github.com/advisories/GHSA-6r97-cj55-9hrq","https://github.com/django/django","https://github.com/pypa/advisory-database/tree/main/vulns/django/PYSEC-2019-13.yaml","https://groups.google.com/forum/#!topic/django-announce/jIoju2-KLDs","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/STVX7X7IDWAH5SKE6MBMY3TEI6ZODBTK","https://seclists.org/bugtraq/2019/Aug/15","https://security.gentoo.org/glsa/202004-17","https://security.netapp.com/advisory/ntap-20190828-0002","https://www.debian.org/security/2019/dsa-4498","https://www.djangoproject.com/weblog/2019/aug/01/security-releases","http://lists.opensuse.org/opensuse-security-announce/2019-08/msg00025.html"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-6r97-cj55-9hrq","url":"https://osv.dev/vulnerability/GHSA-6r97-cj55-9hrq"}],"summary":"SQL Injection in Django"}