Search for packages
Package details: pkg:alpm/archlinux/python-django@4.0.5-1
purl pkg:alpm/archlinux/python-django@4.0.5-1
Next non-vulnerable version 4.0.7-1
Latest non-vulnerable version 5.1.11-1
Risk 10.0
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-3hnw-g9hf-aaap
Aliases:
BIT-2022-34265
BIT-django-2022-34265
CVE-2022-34265
GHSA-p64x-8rxx-wf6q
PYSEC-2022-213
An issue was discovered in Django 3.2 before 3.2.14 and 4.0 before 4.0.6. The Trunc() and Extract() database functions are subject to SQL injection if untrusted data is used as a kind/lookup_name value. Applications that constrain the lookup name and kind choice to a known safe list are unaffected.
4.0.6-1
Affected by 1 other vulnerability.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-03-28T07:45:15.675057+00:00 Arch Linux Importer Affected by VCID-3hnw-g9hf-aaap https://security.archlinux.org/AVG-2788 36.0.0
2024-09-18T02:00:11.611763+00:00 Arch Linux Importer Affected by VCID-3hnw-g9hf-aaap https://security.archlinux.org/AVG-2788 34.0.1
2024-01-03T22:26:26.052304+00:00 Arch Linux Importer Affected by VCID-3hnw-g9hf-aaap https://security.archlinux.org/AVG-2788 34.0.0rc1