... extra() ¶ QuerySet.annotate() , aggregate() , and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods. CVE-2022-28347: Potential SQL inje ... uerySet.explain(**options) on PostgreSQL ¶ QuerySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument. 目次 Django 2.2.28 リリースノート CVE-2022-28346 ... .2.27 リリースノート 関連キーワード injection QuerySet dictionary Potential annotate aggregate extra methods subject using suitably crafted expansion explain options リリースノート high セキュリティ 問題 修正 were column aliases kwargs passed クイック検索 ... ... extra() ¶ QuerySet.annotate() , aggregate() , and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods. CVE-2022-28347: Potential SQL inje ... uerySet.explain(**options) on PostgreSQL ¶ QuerySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument. 目次 Django 2.2.28 リリースノート CVE-2022-28346 ... リリースノート 関連キーワード injection QuerySet dictionary Django Potential annotate aggregate extra methods subject using suitably crafted expansion explain options リリースノート high セキュリティ 問題 関連するページ Django 3.2.13 リリースノート Django ... ... extra() ¶ QuerySet.annotate() , aggregate() , and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods. CVE-2022-28347: Potential SQL inje ... uerySet.explain(**options) on PostgreSQL ¶ QuerySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument. バグ修正 ¶ Fixed a regression in Django 3.2.4 th ... リリースノート 関連キーワード injection QuerySet dictionary 修正 Potential annotate aggregate extra methods subject using suitably crafted expansion explain options option リリースノート high セキュリティ 問題 リグレッション were column aliases クイック ... ... extra() ¶ QuerySet.annotate() , aggregate() , and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods. CVE-2022-28347: Potential SQL inje ... uerySet.explain(**options) on PostgreSQL ¶ QuerySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument. バグ修正 ¶ Fixed a regression in Django 4.0 that ... リースノート 関連キーワード injection QuerySet dictionary バグ 修正 Potential annotate aggregate extra methods subject using suitably crafted expansion explain options option Fixed regression caused リリースノート high セキュリティ 問題 クイック検索 Last u ... ... extra() ¶ QuerySet.annotate() , aggregate() , and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods. CVE-2022-28347: Potential SQL inje ... uerySet.explain(**options) on PostgreSQL ¶ QuerySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument. バグ修正 ¶ Fixed a regression in Django 3.2.4 th ... ースノート 関連キーワード injection QuerySet dictionary Django 修正 Potential annotate aggregate extra methods subject using suitably crafted expansion explain options option リリースノート high 関連するページ Django 2.2.28 リリースノート Django 4.0.4 リリ ... ... extra() ¶ QuerySet.annotate() , aggregate() , and extra() methods were subject to SQL injection in column aliases, using a suitably crafted dictionary, with dictionary expansion, as the **kwargs passed to these methods. CVE-2022-28347: Potential SQL inje ... uerySet.explain(**options) on PostgreSQL ¶ QuerySet.explain() method was subject to SQL injection in option names, using a suitably crafted dictionary, with dictionary expansion, as the **options argument. バグ修正 ¶ Fixed a regression in Django 4.0 that ... ート 関連キーワード Django injection QuerySet dictionary バグ 修正 Potential annotate aggregate extra methods subject using suitably crafted expansion explain options option Fixed 関連するページ Django 3.2.13 リリースノート Django 2.2.28 リリースノート Dj ... ... in GIS functions and aggregates on Oracle ¶ GIS functions and aggregates on Oracle were subject to SQL injection, using a suitably crafted tolerance . 目次 Django 1.11.29 リリースノート CVE-2020-9402: Potential SQL injection via tolerance parameter in G ... ion tolerance functions aggregates Oracle リリースノート March fixes security issue Potential parameter were subject using suitably crafted クイック検索 Last update: 2026年10月09日 « previous | up | next » ... ... -traversal via uploaded files ¶ MultiPartParser allowed directory-traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability. 目次 Django 3.0.14 リリースノート CV ... ード directory traversal uploaded files リリースノート April fixes security issue severity Potential MultiPartParser allowed suitably crafted names Built-in upload handlers were affected vulnerability クイック検索 Last update: 2026年10月09日 « previous | u ... ... -traversal via uploaded files ¶ MultiPartParser allowed directory-traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability. 目次 Django 2.2.20 リリースノート CV ... ード directory traversal uploaded files リリースノート April fixes security issue severity Potential MultiPartParser allowed suitably crafted names Built-in upload handlers were affected vulnerability クイック検索 Last update: 2026年10月09日 « previous | u ... ... d files ¶ MultiPartParser , UploadedFile , and FieldFile allowed directory-traversal via uploaded files with suitably crafted file names. In order to mitigate this risk, stricter basename and path sanitation is now applied. 目次 Django 2.2. ... tory traversal uploaded files リリースノート fixes security issue Potential MultiPartParser UploadedFile FieldFile allowed suitably crafted names order mitigate risk stricter basename path sanitation applied クイック検索 Last update: 2026年10月09日 « pre ... 2026年10月08日