GHSA-6426-9fv3-65x8
Medium · 5.4CVSS
5.4
EPSS
—
Published
Feb 3, 2026
CISA due date
—
The record
Django has an SQL Injection issue
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| PyPI | django | 4.2a1 | 4.2.28 |
| PyPI | django | 5.2a1 | 5.2.11 |
| PyPI | django | 6.0a1 | 6.0.2 |
| Bitnami | django | 4.2.0 | 4.2.28 |
| Chainguard | authentik | 0 | 2025.12.1-r2 |
| Chainguard | authentik-fips | 0 | 2025.12.1-r2 |
| Chainguard | awx | 0 | 24.6.1-r27 |
| Chainguard | label-studio | 0 | 1.22.0-r3 |
Related vulnerabilities
- CVE-2026-1312 An issue was discovered in 6.0 before 6.0.2, 5.2 before 5.2.11, and 4.2 before 4.2.28. Same vulnerability
- GHSA-8p8v-wh79-9r56 Django vulnerable to Uncontrolled Resource Consumption Also affects django
- GHSA-mjgh-79qc-68w3 Django has a Race Condition vulnerability Also affects django
- CVE-2026-25673 An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Also affects django
- CVE-2026-25674 An issue was discovered in 6.0 before 6.0.3, 5.2 before 5.2.12, and 4.2 before 4.2.29. Also affects django
- GHSA-gvg8-93h5-g6qq Django has an SQL Injection issue Also affects django
- GHSA-2mcm-79hx-8fxw Django has Observable Timing Discrepancy Also affects django
- GHSA-33mw-q7rj-mjwj Django has Inefficient Algorithmic Complexity Also affects django