PT-2025-40290 · Django+4 · Django+4

Sw0Rd1Ight

·

Published

2025-10-01

·

Updated

2026-01-03

·

CVE-2025-59681

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Django versions 4.2 through 4.2.25 Django versions 5.1 through 5.1.13 Django versions 5.2 through 5.2.7
Description A SQL injection issue exists in Django’s QuerySet methods—specifically annotate(), alias(), aggregate(), and extra()—when using a crafted dictionary with dictionary expansion as the kwargs passed to these methods on MySQL and MariaDB databases. The issue affects column aliases.
Recommendations Update to Django version 4.2.25 or later. Update to Django version 5.1.13 or later. Update to Django version 5.2.7 or later.

Fix

SQL injection

Relative Path Traversal

Weakness Enumeration

Related Identifiers

BDU:2025-12461
BDU:2025-12661
BIT-DJANGO-2025-59681
CVE-2025-59681
DLA-4324-1
ECHO-5818-1FBA-950A
GHSA-HPR9-3M2G-3J9P
MGASA-2025-0243
OESA-2025-2378
OESA-2025-2379
OESA-2025-2460
OESA-2025-2461
OESA-2025-2462
OESA-2025-2463
OPENSUSE-SU-2025:15596-1
OPENSUSE-SU-2025:15598-1
OPENSUSE-SU-2025:20022-1
OPENSUSE-SU-2026:10005-1
PYSEC-2025-106
SUSE-SU-2025:03446-1
USN-7794-1

Affected Products

Debian
Django
Linuxmint
Red Os
Ubuntu