... ation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ¶ Raster lookups on GIS fields (only implemented on PostGIS) were subject to SQL injection i ... ng HTML parsing. This issue has severity "moderate" according to the Django security policy . CVE-2026-1287: Potential SQL injection in column aliases via control characters ¶ FilteredRelation was subject to SQL injection in column aliases via control cha ... st() , and alias() . This issue has severity "high" according to the Django security policy . CVE-2026-1312: Potential SQL injection via QuerySet.order_by and FilteredRelation ¶ QuerySet.order_by() was subject to SQL injection in column aliases containing ... ... ation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ¶ Raster lookups on GIS fields (only implemented on PostGIS) were subject to SQL injection i ... ng HTML parsing. This issue has severity "moderate" according to the Django security policy . CVE-2026-1287: Potential SQL injection in column aliases via control characters ¶ FilteredRelation was subject to SQL injection in column aliases via control cha ... st() , and alias() . This issue has severity "high" according to the Django security policy . CVE-2026-1312: Potential SQL injection via QuerySet.order_by and FilteredRelation ¶ QuerySet.order_by() was subject to SQL injection in column aliases containing ... ... ation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ¶ Raster lookups on GIS fields (only implemented on PostGIS) were subject to SQL injection i ... ng HTML parsing. This issue has severity "moderate" according to the Django security policy . CVE-2026-1287: Potential SQL injection in column aliases via control characters ¶ FilteredRelation was subject to SQL injection in column aliases via control cha ... st() , and alias() . This issue has severity "high" according to the Django security policy . CVE-2026-1312: Potential SQL injection via QuerySet.order_by and FilteredRelation ¶ QuerySet.order_by() was subject to SQL injection in column aliases containing ... ... ation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ¶ Raster lookups on GIS fields (only implemented on PostGIS) were subject to SQL injection i ... ng HTML parsing. This issue has severity "moderate" according to the Django security policy . CVE-2026-1287: Potential SQL injection in column aliases via control characters ¶ FilteredRelation was subject to SQL injection in column aliases via control cha ... st() , and alias() . This issue has severity "high" according to the Django security policy . CVE-2026-1312: Potential SQL injection via QuerySet.order_by and FilteredRelation ¶ QuerySet.order_by() was subject to SQL injection in column aliases containing ... ... Potential SQL injection in QuerySet.annotate() , aggregate() , and extra() ¶ QuerySet.annotate() , aggregate() , and extra() methods were subject ... to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods ... . CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on PostgreSQL ¶ QuerySet.explain() method was subject to SQL injection in option names, us ... ... ation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ¶ Raster lookups on GIS fields (only implemented on PostGIS) were subject to SQL injection i ... ng HTML parsing. This issue has severity "moderate" according to the Django security policy . CVE-2026-1287: Potential SQL injection in column aliases via control characters ¶ FilteredRelation was subject to SQL injection in column aliases via control cha ... st() , and alias() . This issue has severity "high" according to the Django security policy . CVE-2026-1312: Potential SQL injection via QuerySet.order_by and FilteredRelation ¶ QuerySet.order_by() was subject to SQL injection in column aliases containing ... ... ation or outage. This issue has severity "moderate" according to the Django security policy . CVE-2026-1207: Potential SQL injection via raster lookups on PostGIS ¶ Raster lookups on GIS fields (only implemented on PostGIS) were subject to SQL injection i ... ng HTML parsing. This issue has severity "moderate" according to the Django security policy . CVE-2026-1287: Potential SQL injection in column aliases via control characters ¶ FilteredRelation was subject to SQL injection in column aliases via control cha ... st() , and alias() . This issue has severity "high" according to the Django security policy . CVE-2026-1312: Potential SQL injection via QuerySet.order_by and FilteredRelation ¶ QuerySet.order_by() was subject to SQL injection in column aliases containing ... ... Potential SQL injection in QuerySet.annotate() , aggregate() , and extra() ¶ QuerySet.annotate() , aggregate() , and extra() methods were subject ... to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods ... . CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on PostgreSQL ¶ QuerySet.explain() method was subject to SQL injection in option names, us ... ... 修正しました。 CVE-2022-28346: Potential SQL injection in QuerySet.annotate() , aggregate() , and extra() ¶ QuerySet.annotate() , aggregate() , and extra() methods were subject ... to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods ... . CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on PostgreSQL ¶ QuerySet.explain() method was subject to SQL injection in option names, us ... ... 28346: Potential SQL injection in QuerySet.annotate() , aggregate() , and extra() ¶ QuerySet.annotate() , aggregate() , and extra() methods were subject ... to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods ... . CVE-2022-28347: Potential SQL injection via QuerySet.explain(**options) on PostgreSQL ¶ QuerySet.explain() method was subject to SQL injection in option names, us ... 2026年10月08日