REDHAT-BUG-2400449: SQL Injection

Published Sep 30, 2025

Updated

QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), andQuerySet.extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the kwargs passed to these methods on MySQL and MariaDB.

Affected Software

1 affected component

Django Software Foundation Django

Event History

Sep 30, 2025

Data Sourced

via Red Hat·01:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Which database deployments are affected?

The issue applies to Django deployments using MySQL or MariaDB.

What application behavior is required for exploitation?

An application must pass a suitably crafted dictionary using dictionary expansion as keyword arguments to QuerySet.annotate(), QuerySet.alias(), QuerySet.aggregate(), or QuerySet.extra().

REDHAT-BUG-2400449: SQL Injection

Affected Software

Event History

Frequently Asked Questions

Which database deployments are affected?

What application behavior is required for exploitation?

Company

Resources

Contact

Frequently Asked Questions

Which database deployments are affected?

What application behavior is required for exploitation?