Mariusz Felisiak 52fbae0a4d [5.2.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggregate(), and extra() against SQL injection in column aliases on MySQL/MariaDB. ...

Thanks sw0rd1ight for the report.

Follow up to 93cae5cb2f.

Backport of 41b43c74bd from main.

2025-10-01 08:24:18 -04:00

..

__init__.py

…

models.py

Fixed CVE-2024-42005 -- Mitigated QuerySet.values() SQL injection attacks against JSON fields.

2024-08-06 08:50:08 +02:00

test_queryset_values.py

[5.2.x] Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggregate(), and extra() against SQL injection in column aliases on MySQL/MariaDB.

2025-10-01 08:24:18 -04:00

tests.py

[5.2.x] Fixed #36198 -- Implemented unresolved transform expression replacement.

2025-08-04 09:41:29 +02:00