... and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods. CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on Postg ... erySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument. 目次 Django 2.2.28 リリースノート CVE-2022-28346: Potential SQL injection in QuerySet.annotate ... ート 関連キーワード injection QuerySet dictionary Potential annotate aggregate extra methods subject using suitably crafted expansion explain options リリースノート high セキュリティ 問題 修正 were column aliases kwargs passed クイック検索 Last update: 202 ... ... and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods. CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on Postg ... erySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument. 目次 Django 2.2.28 リリースノート CVE-2022-28346: Potential SQL injection in QuerySet.annotate ... 連キーワード injection QuerySet dictionary Django Potential annotate aggregate extra methods subject using suitably crafted expansion explain options リリースノート high セキュリティ 問題 関連するページ Django 3.2.13 リリースノート Django 4.0.4 リリースノー ... ... and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods. CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on Postg ... erySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument. バグ修正 ¶ Fixed a regression in Django 3.2.4 that caused the auto-reloader to no longer detec ... 関連キーワード injection QuerySet dictionary 修正 Potential annotate aggregate extra methods subject using suitably crafted expansion explain options option リリースノート high セキュリティ 問題 リグレッション were column aliases クイック検索 Last update: ... ... and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods. CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on Postg ... erySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument. バグ修正 ¶ Fixed a regression in Django 4.0 that caused ignoring multiple FilteredRelation() r ... キーワード injection QuerySet dictionary バグ 修正 Potential annotate aggregate extra methods subject using suitably crafted expansion explain options option Fixed regression caused リリースノート high セキュリティ 問題 クイック検索 Last update: 2026年10月0 ... ... and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods. CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on Postg ... erySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument. バグ修正 ¶ Fixed a regression in Django 3.2.4 that caused the auto-reloader to no longer detec ... ーワード injection QuerySet dictionary Django 修正 Potential annotate aggregate extra methods subject using suitably crafted expansion explain options option リリースノート high 関連するページ Django 2.2.28 リリースノート Django 4.0.4 リリースノート Django ... ... and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods. CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on Postg ... erySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument. バグ修正 ¶ Fixed a regression in Django 4.0 that caused ignoring multiple FilteredRelation() r ... ド Django injection QuerySet dictionary バグ 修正 Potential annotate aggregate extra methods subject using suitably crafted expansion explain options option Fixed 関連するページ Django 3.2.13 リリースノート Django 2.2.28 リリースノート Django 1.11.29 リリー ... ... QL ¶ FilteredRelation was subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to QuerySet.annotate() or QuerySet.alias() on PostgreSQL. CVE-2025-64460: Potential denial-of-serv ... reSQL subject crafted dictionary QuerySet denial service text characters リリースノート fixes high moderate using suitably expansion kwargs クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... QL ¶ FilteredRelation was subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to QuerySet.annotate() or QuerySet.alias() on PostgreSQL. CVE-2025-64460: Potential denial-of-serv ... reSQL subject crafted dictionary QuerySet denial service text characters リリースノート fixes high moderate using suitably expansion kwargs クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... as subject to SQL injection in column aliases via control characters, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to QuerySet.annotate() , aggregate() , extra() , values() , values_list() , and alias() . This iss ... jection in column aliases containing periods when the same alias was, using a suitably crafted dictionary, with dictionary expansion, used in FilteredRelation . This issue has severity "high" according to the Django security policy . 目次 Django 4.2.28 re ... ... as subject to SQL injection in column aliases via control characters, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to QuerySet.annotate() , aggregate() , extra() , values() , values_list() , and alias() . This iss ... jection in column aliases containing periods when the same alias was, using a suitably crafted dictionary, with dictionary expansion, used in FilteredRelation . This issue has severity "high" according to the Django security policy . 目次 Django 5.2.11 re ... 2026年10月08日