... ", and one bug in 4.2.26. CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL ¶ FilteredRelation was subject to SQL injection in column aliases, using a suitably crafted dictiona ... 16384 characters ( #36743 ). 目次 Django 4.2.27 リリースノート CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL CVE-2025-64460: Potential denial-of-service vulnerability in XML Deserializer バグ修正 前のトピックへ ... es 次のトピックへ Django 4.2.26 リリースノート 関連キーワード security issue severity Potential injection FilteredRelation column aliases PostgreSQL subject crafted dictionary QuerySet denial service text characters リリースノート fixes high moderate u ... ... ", and one bug in 5.1.14. CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL ¶ FilteredRelation was subject to SQL injection in column aliases, using a suitably crafted dictiona ... 16384 characters ( #36743 ). 目次 Django 5.1.15 リリースノート CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL CVE-2025-64460: Potential denial-of-service vulnerability in XML Deserializer バグ修正 前のトピックへ ... ート 次のトピックへ Django 5.1.14 リリースノート 関連キーワード security issue severity Potential injection FilteredRelation column aliases PostgreSQL subject crafted dictionary QuerySet denial service text characters リリースノート fixes high moderate u ... ... ng. This issue has severity "moderate" according to the Django security policy . CVE-2026-1287: Potential SQL injection in column aliases via control characters ¶ FilteredRelation was subject to SQL injection in column aliases via control characters, u ... : Potential SQL injection via QuerySet.order_by and FilteredRelation ¶ QuerySet.order_by() was subject to SQL injection in column aliases containing periods when the same alias was, using a suitably crafted dictionary, with dictionary expansion, used i ... tial denial-of-service vulnerability in django.utils.text.Truncator HTML methods CVE-2026-1287: Potential SQL injection in column aliases via control characters CVE-2026-1312: Potential SQL injection via QuerySet.order_by and FilteredRelation 前のトピッ ... ... ng. This issue has severity "moderate" according to the Django security policy . CVE-2026-1287: Potential SQL injection in column aliases via control characters ¶ FilteredRelation was subject to SQL injection in column aliases via control characters, u ... : Potential SQL injection via QuerySet.order_by and FilteredRelation ¶ QuerySet.order_by() was subject to SQL injection in column aliases containing periods when the same alias was, using a suitably crafted dictionary, with dictionary expansion, used i ... tial denial-of-service vulnerability in django.utils.text.Truncator HTML methods CVE-2026-1287: Potential SQL injection in column aliases via control characters CVE-2026-1312: Potential SQL injection via QuerySet.order_by and FilteredRelation 前のトピッ ... ... ", and one bug in 4.2.26. CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL ¶ FilteredRelation was subject to SQL injection in column aliases, using a suitably crafted dictiona ... 16384 characters ( #36743 ). 目次 Django 4.2.27 リリースノート CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL CVE-2025-64460: Potential denial-of-service vulnerability in XML Deserializer バグ修正 前のトピックへ ... ピックへ Django 4.2.26 リリースノート 関連キーワード Django one security issue severity Potential injection FilteredRelation column aliases PostgreSQL subject crafted dictionary QuerySet denial service text now characters 関連するページ Django 5.1.15 リリ ... ... ", and one bug in 5.1.14. CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL ¶ FilteredRelation was subject to SQL injection in column aliases, using a suitably crafted dictiona ... 16384 characters ( #36743 ). 目次 Django 5.1.15 リリースノート CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL CVE-2025-64460: Potential denial-of-service vulnerability in XML Deserializer バグ修正 前のトピックへ ... ピックへ Django 5.1.14 リリースノート 関連キーワード Django one security issue severity Potential injection FilteredRelation column aliases PostgreSQL subject crafted dictionary QuerySet denial service text now characters 関連するページ Django 4.2.27 リリ ... ... ng. This issue has severity "moderate" according to the Django security policy . CVE-2026-1287: Potential SQL injection in column aliases via control characters ¶ FilteredRelation was subject to SQL injection in column aliases via control characters, u ... : Potential SQL injection via QuerySet.order_by and FilteredRelation ¶ QuerySet.order_by() was subject to SQL injection in column aliases containing periods when the same alias was, using a suitably crafted dictionary, with dictionary expansion, used i ... tial denial-of-service vulnerability in django.utils.text.Truncator HTML methods CVE-2026-1287: Potential SQL injection in column aliases via control characters CVE-2026-1312: Potential SQL injection via QuerySet.order_by and FilteredRelation バグ修正 ... ... and several bugs in 5.2.8. CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL ¶ FilteredRelation was subject to SQL injection in column aliases, using a suitably crafted dictiona ... ferred evaluation ( #36712 ). 目次 Django 5.2.9 リリースノート CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL CVE-2025-64460: Potential denial-of-service vulnerability in XML Deserializer バグ修正 前のトピックへ ... へ Django 5.2.8 リリースノート 関連キーワード Fixed PostgreSQL security issue severity Potential injection FilteredRelation column aliases subject using crafted dictionary QuerySet denial service invalid text regression crash functions annotations chara ... ... and several bugs in 5.2.8. CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL ¶ FilteredRelation was subject to SQL injection in column aliases, using a suitably crafted dictiona ... ferred evaluation ( #36712 ). 目次 Django 5.2.9 リリースノート CVE-2025-13372: Potential SQL injection in FilteredRelation column aliases on PostgreSQL CVE-2025-64460: Potential denial-of-service vulnerability in XML Deserializer バグ修正 前のトピックへ ... 2.8 リリースノート 関連キーワード Django Fixed PostgreSQL one security issue severity Potential injection FilteredRelation column aliases subject using crafted dictionary QuerySet denial service invalid 関連するページ Django 4.2.27 リリースノート Djang ... ... ion via unsanitized QuerySet.order_by() input ¶ Unsanitized user input passed to QuerySet.order_by() could bypass intended column reference validation in path marked for deprecation resulting in a potential SQL injection even if a deprecation warning i ... s emitted. As a mitigation the strict column reference validation was restored for the duration of the deprecation period. This regression appeared in 3.1 as a side ef ... リリースノート 次のトピックへ Django 3.1.12 リリースノート 関連キーワード deprecation issue injection QuerySet order input column reference validation path リリースノート July fixes security severity high Potential unsanitized Unsanitized user passed b ... 2026年10月08日