SQL injection in Django - CVE-2026-1312

Vulnerability identifier: #VU122261

CSH Severity: High

CVSS v4: 9.3 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N]

CVE-ID: CVE-2026-1312

CWE-ID: CWE-89

Exploitation vector: Remote access

Exploit availability: No public exploit available

The vulnerability allows a remote attacker to execute arbitrary SQL queries in database.

The vulnerability exists due to insufficient sanitization of user-supplied data within the QuerySet.order_by() method. A remote attacker can send a specially crafted request to the affected application and execute arbitrary SQL commands within the application database.

Successful exploitation of this vulnerability may allow a remote attacker to read, delete, modify data in database and gain complete control over the affected application.

Django
Debian Linux
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Server 15
SUSE Linux Enterprise Real Time 15
SUSE Linux Enterprise Desktop 15
Fedora
Ubuntu
SUSE Package Hub 15
openSUSE Leap
openEuler
Anolis OS
Maximo Application Suite - Edge Data Collector
ansible-sign (Red Hat package)
python3.12-rfc3339-validator (Red Hat package)
python3.12-ruamel-yaml-clib (Red Hat package)
python3.12-nh3 (Red Hat package)
python3.12-pyasn1-modules (Red Hat package)
python3.12-insights-analytics-collector (Red Hat package)
python3.12-jsonschema-path (Red Hat package)
python3.12-drools-jpy (Red Hat package)
python3.12-distlib (Red Hat package)
python3.12-propcache (Red Hat package)
python3.12-subprocess-tee (Red Hat package)
python3.12-pathable (Red Hat package)
python3.12-colorama (Red Hat package)
python3.12-json-stream-rs-tokenizer (Red Hat package)
python3.12-galaxy-importer (Red Hat package)
python3.12-pyasn1 (Red Hat package)
python3.12-inflection (Red Hat package)
python3.12-gnupg (Red Hat package)
python3.12-sqlparse (Red Hat package)
aap-metrics-utility (Red Hat package)
python3.12-isodate (Red Hat package)
python3.12-openapi-schema-validator (Red Hat package)
python3.12-ptyprocess (Red Hat package)
python3.12-mccabe (Red Hat package)
python3.12-openapi-spec-validator (Red Hat package)
python3.12-defusedxml (Red Hat package)
python3.12-django-crum (Red Hat package)
python3.12-pytest-plus (Red Hat package)
python3.12-tabulate (Red Hat package)
python3.12-commonmark (Red Hat package)
python3.12-click-help-colors (Red Hat package)
python3.12-s3transfer (Red Hat package)
python3.12-pathspec (Red Hat package)
python3.12-lockfile (Red Hat package)
python3.12-rq-scheduler (Red Hat package)
python3.12-jpy (Red Hat package)
python3.12-ecdsa (Red Hat package)
python3.12-rpds-py (Red Hat package)
python3.12-ruamel-yaml (Red Hat package)
python3.12-prometheus-client (Red Hat package)
python3.12-openapi-core (Red Hat package)
python3.12-pulp-glue (Red Hat package)
python3.12-pulp-ansible (Red Hat package)
python3.12-drf-spectacular (Red Hat package)
python3.12-validators (Red Hat package)
python3.12-referencing (Red Hat package)
python3.12-wheel (Red Hat package)
python3.12-drf-nested-routers (Red Hat package)
python3.12-mypy-extensions (Red Hat package)
python3.12-ansible-sdk (Red Hat package)
python3.12-janus (Red Hat package)
python3.12-ldap-filter (Red Hat package)
python3.12-resolvelib (Red Hat package)
python3.12-jmespath (Red Hat package)
python3.12-asyncio-throttle (Red Hat package)
python3.12-persisting-theory (Red Hat package)
python3.12-crontab (Red Hat package)
automation-controller-fapolicyd (Red Hat package)
python3.12-djangorestframework-queryfields (Red Hat package)
python3.12-et-xmlfile (Red Hat package)
python3.12-pytest-sugar (Red Hat package)
python3.12-django-lifecycle (Red Hat package)
ansible-rulebook (Red Hat package)
automation-eda-controller (Red Hat package)
python3.12-brotli (Red Hat package)
python3.12-django-split-settings (Red Hat package)
python3.12-netaddr (Red Hat package)
python3.12-ansible-pylibssh (Red Hat package)
python3.12-enrich (Red Hat package)
python3.12-deprecated (Red Hat package)
python3.12-onigurumacffi (Red Hat package)
python3.12-xlwt (Red Hat package)
python3.12-requests-oauthlib (Red Hat package)
python3.12-parsley (Red Hat package)
python3.12-xmlsec (Red Hat package)
python3.12-aiosignal (Red Hat package)
python3.12-frozenlist (Red Hat package)
python3.12-odfpy (Red Hat package)
python3.12-url-normalize (Red Hat package)
python3.12-drf-access-policy (Red Hat package)
python3.12-freezegun (Red Hat package)
python3.12-jwcrypto (Red Hat package)
python3.12-jq (Red Hat package)
python3.12-pluggy (Red Hat package)
python3.12-pyproject-api (Red Hat package)
receptor (Red Hat package)
python3.12-uamqp (Red Hat package)
python-django (Ubuntu package)
python3.12-websocket-client (Red Hat package)
python3.12-distro (Red Hat package)
python3.12-lazy-object-proxy (Red Hat package)
python3.12-pydantic (Red Hat package)
python3.12-django-storages (Red Hat package)
python3.12-markuppy (Red Hat package)
python3.12-django-dynamic-preferences (Red Hat package)
python3.12-wrapt (Red Hat package)
python3.12-python3-saml (Red Hat package)
python3.12-six (Red Hat package)
python3.12-yarl (Red Hat package)
python3.12-parse (Red Hat package)
python3.12-opentelemetry (Red Hat package)
python3.12-opentelemetry-contrib (Red Hat package)
python3.12-azure-core (Red Hat package)
python3.12-boto3 (Red Hat package)
python3.12-botocore (Red Hat package)
yamllint (Red Hat package)
python3.12-xds-protos (Red Hat package)
python3.12-grpcio (Red Hat package)
python3.12-googleapis-common-protos (Red Hat package)
python3.12-iniconfig (Red Hat package)
pulpcore-selinux (Red Hat package)
python3.12-croniter (Red Hat package)
python3.12-xlrd (Red Hat package)
python3.12-async-lru (Red Hat package)
uwsgi (Red Hat package)
python3.12-execnet (Red Hat package)
python3.12-markupsafe (Red Hat package)
python3.12-dpath (Red Hat package)
python3.12-backoff (Red Hat package)
python3-Django
python-django
python-django-help
python3.12-django-oauth-toolkit (Red Hat package)
python3.12-django-prometheus (Red Hat package)
python3.12-json-stream (Red Hat package)
python3.12-bracex (Red Hat package)
ansible-runner (Red Hat package)
python3.12-pyrad (Red Hat package)
python3.12-pygtrie (Red Hat package)
ansible-automation-platform-installer (Red Hat package)
python3.12-django-ansible-base (Red Hat package)
automation-gateway (Red Hat package)
python3.12-aiohappyeyeballs (Red Hat package)
python3.12-rq (Red Hat package)
python3.12-tacacs-plus (Red Hat package)
python3.12-urllib3 (Red Hat package)
python3.12-pyjwt (Red Hat package)
python3.12-dateutil (Red Hat package)
python3.12-semantic-version (Red Hat package)
python3.12-pycodestyle (Red Hat package)
bindep (Red Hat package)
ansible-core (Red Hat package)
python3.12-pygments (Red Hat package)
python3.12-pulp-container (Red Hat package)
python3.12-google-auth (Red Hat package)
python3.12-requests (Red Hat package)
python3.12-werkzeug (Red Hat package)
python3.12-django-ipware (Red Hat package)
python3.12-pyflakes (Red Hat package)
python3.12-termcolor (Red Hat package)
ansible-builder (Red Hat package)
python3.12-pyparsing (Red Hat package)
python3.12-django-picklefield (Red Hat package)
python3.12-openpyxl (Red Hat package)
python3.12-daemon (Red Hat package)
python3.12-jinja2 (Red Hat package)
python3.12-gitpython (Red Hat package)
python3.12-aiodns (Red Hat package)
python3.12-python3-openid (Red Hat package)
python3.12-django-rq (Red Hat package)
python3.12-oauthlib (Red Hat package)
python3.12-psycopg (Red Hat package)
python3.12-dynaconf (Red Hat package)
python-django (Debian package)
python3.12-django-import-export (Red Hat package)
python3.12-django-guid (Red Hat package)
python3.12-xxhash (Red Hat package)
python3.12-ldap (Red Hat package)
python3.12-tablib (Red Hat package)
python3.12-markdown (Red Hat package)
python3.12-asgiref (Red Hat package)
python3.12-pytest-xdist (Red Hat package)
python3.12-filelock (Red Hat package)
python3.12-aiohttp (Red Hat package)
python3.12-djangorestframework (Red Hat package)
python3.12-zipp (Red Hat package)
python3.12-marshmallow (Red Hat package)
python3.12-pulpcore (Red Hat package)
python3.12-django-auth-ldap (Red Hat package)
python3.12-daphne (Red Hat package)
python3.12-channels (Red Hat package)
python3.12-gitdb (Red Hat package)
python3.12-uritemplate (Red Hat package)
python3.12-django-extensions (Red Hat package)
python3.12-platformdirs (Red Hat package)
supervisor (Red Hat package)
python311-Django
python3-django-bash-completion
python3-django-doc
python3-django
python3.12-django (Red Hat package)
python-django4.2
python3.12-pycares (Red Hat package)
python3.12-social-auth-core (Red Hat package)
python3.12-redis (Red Hat package)
automation-controller (Red Hat package)
python3.12-pexpect (Red Hat package)
python3.12-rsa (Red Hat package)
python3.12-galaxy-ng (Red Hat package)
automation-hub (Red Hat package)
python3.12-typing-extensions (Red Hat package)
python3.12-tox (Red Hat package)
python3.12-jsonschema (Red Hat package)
python3.12-smmap (Red Hat package)
python3.12-watchdog (Red Hat package)
python3.12-django-flags (Red Hat package)
python3.12-chardet (Red Hat package)
python-django5
python3.12-lxml (Red Hat package)
python3.12-cachetools (Red Hat package)
python3.12-podman (Red Hat package)
python3.12-django-redis (Red Hat package)
python3.12-social-auth-app-django (Red Hat package)
python3.12-protobuf (Red Hat package)
python3.12-pbr (Red Hat package)
python3.12-importlib-metadata (Red Hat package)
python3.12-multidict (Red Hat package)
python3.12-flake8 (Red Hat package)
python3.12-zope-interface (Red Hat package)
python3.12-whitenoise (Red Hat package)
python3.12-click (Red Hat package)
python3.12-wcmatch (Red Hat package)
python3.12-pytest (Red Hat package)
python3.12-more-itertools (Red Hat package)
python3.12-pillow (Red Hat package)
python3.12-pillow-debugsource (Red Hat package)
python3.12-azure-storage-blob (Red Hat package)
python3.12-rich (Red Hat package)
python3.12-websockets (Red Hat package)
python3.12-virtualenv (Red Hat package)
python3.12-hyperlink (Red Hat package)
python3.12-service-identity (Red Hat package)
python3.12-argon2-cffi-bindings (Red Hat package)
python3.12-attrs (Red Hat package)
python3.12-Automat (Red Hat package)
python3.12-gunicorn (Red Hat package)
python3.12-argon2-cffi (Red Hat package)
python3.12-txaio (Red Hat package)
python3.12-aiofiles (Red Hat package)
python3.12-packaging (Red Hat package)
python3.12-django-filter (Red Hat package)
python3.12-constantly (Red Hat package)
python3.12-pyOpenSSL (Red Hat package)
python3.12-autobahn (Red Hat package)
python3.12-black (Red Hat package)
python3.12-twisted (Red Hat package)
python3.12-incremental (Red Hat package)
ansible-creator (Red Hat package)
molecule (Red Hat package)
python3.12-pytest-ansible (Red Hat package)
python3.12-tox-ansible (Red Hat package)
python3.12-ansible-compat (Red Hat package)
ansible-dev-environment (Red Hat package)
python3.12-kubernetes (Red Hat package)
ansible-dev-tools (Red Hat package)
ansible-lint (Red Hat package)
ansible-navigator (Red Hat package)
python3.12-cryptography (Red Hat package)
python3.12-setuptools (Red Hat package)
python3.12-certifi (Red Hat package)
python3.12-jsonschema-specifications (Red Hat package)
python3.12-pytz (Red Hat package)
python3.12-uuid6 (Red Hat package)
python3.12-dispatcherd (Red Hat package)
python3.12-diff-match-patch (Red Hat package)
Ansible Automation Platform

Install updates from vendor's website.

Django - addressed in versions 4.2.28, 5.2.11, 6.0.2
Maximo Application Suite - Edge Data Collector - addressed in versions 8.11.27, 9.0.19, 9.1.9
ansible-sign (Red Hat package) - addressed in versions 0.1.4-2.el8ap, 0.1.4-2.el9ap
python3.12-rfc3339-validator (Red Hat package) - addressed in versions 0.1.4-2.el8ap, 0.1.4-2.el9ap
python3.12-ruamel-yaml-clib (Red Hat package) - addressed in versions 0.2.15-2.el8ap, 0.2.15-2.el9ap
python3.12-nh3 (Red Hat package) - addressed in versions 0.2.18-2.el8ap, 0.2.18-2.el9ap
python3.12-pyasn1-modules (Red Hat package) - addressed in versions 0.3.0-2.el8ap, 0.3.0-2.el9ap
python3.12-insights-analytics-collector (Red Hat package) - addressed in versions 0.3.2-3.el8ap, 0.3.2-3.el9ap
python3.12-jsonschema-path (Red Hat package) - addressed in versions 0.3.4-2.el8ap, 0.3.4-2.el9ap
python3.12-drools-jpy (Red Hat package) - addressed in versions 0.3.10-2.el8ap, 0.3.10-2.el9ap
python3.12-distlib (Red Hat package) - addressed in versions 0.4.0-2.el8ap, 0.4.0-2.el9ap
python3.12-propcache (Red Hat package) - addressed in versions 0.4.1-1.el8ap, 0.4.1-1.el9ap
python3.12-subprocess-tee (Red Hat package) - addressed in versions 0.4.2-2.el8ap, 0.4.2-2.el9ap
python3.12-pathable (Red Hat package) - addressed in versions 0.4.3-2.el8ap, 0.4.3-2.el9ap
python3.12-colorama (Red Hat package) - addressed in versions 0.4.6-2.el8ap, 0.4.6-2.el9ap
python3.12-json-stream-rs-tokenizer (Red Hat package) - addressed in versions 0.4.26-2.el8ap, 0.4.26-2.el9ap
python3.12-galaxy-importer (Red Hat package) - addressed in versions 0.4.37-3.el8ap, 0.4.37-3.el9ap
python3.12-pyasn1 (Red Hat package) - addressed in versions 0.5.1-2.el8ap, 0.5.1-2.el9ap
python3.12-inflection (Red Hat package) - addressed in versions 0.5.1-5.el8ap, 0.5.1-5.el9ap
python3.12-gnupg (Red Hat package) - addressed in versions 0.5.2-2.el8ap, 0.5.2-2.el9ap
python3.12-sqlparse (Red Hat package) - addressed in versions 0.5.3-3.el8ap, 0.5.3-3.el9ap
aap-metrics-utility (Red Hat package) - addressed in versions 0.6.0-2.1.el8ap, 0.6.0-2.1.el9ap
python3.12-isodate (Red Hat package) - addressed in versions 0.6.1-3.el8ap, 0.6.1-3.el9ap
python3.12-openapi-schema-validator (Red Hat package) - addressed in versions 0.6.2-2.el8ap, 0.6.2-2.el9ap
python3.12-ptyprocess (Red Hat package) - addressed in versions 0.7.0-2.el8ap, 0.7.0-2.el9ap
python3.12-mccabe (Red Hat package) - addressed in versions 0.7.0-3.el8ap, 0.7.0-3.el9ap
python3.12-openapi-spec-validator (Red Hat package) - addressed in versions 0.7.1-2.el8ap, 0.7.1-2.el9ap
python3.12-defusedxml (Red Hat package) - addressed in versions 0.7.1-5.el8ap, 0.7.1-5.el9ap
python3.12-django-crum (Red Hat package) - addressed in versions 0.7.9-3.el8ap, 0.7.9-3.el9ap
python3.12-pytest-plus (Red Hat package) - addressed in versions 0.8.1-2.el8ap, 0.8.1-2.el9ap
python3.12-tabulate (Red Hat package) - addressed in versions 0.9.0-4.el8ap, 0.9.0-4.el9ap
python3.12-commonmark (Red Hat package) - addressed in versions 0.9.1-7.el8ap, 0.9.1-7.el9ap
python3.12-click-help-colors (Red Hat package) - addressed in versions 0.9.4-2.el8ap, 0.9.4-2.el9ap
python3.12-s3transfer (Red Hat package) - addressed in versions 0.10.0-2.el8ap, 0.10.0-2.el9ap
python3.12-pathspec (Red Hat package) - addressed in versions 0.12.1-2.el8ap, 0.12.1-2.el9ap
python3.12-lockfile (Red Hat package) - addressed in versions 0.12.2-3.el8ap, 0.12.2-3.el9ap
python3.12-rq-scheduler (Red Hat package) - addressed in versions 0.14.0-1.el8ap, 0.14.0-1.el9ap
python3.12-jpy (Red Hat package) - addressed in versions 0.15.0-2.el8ap, 0.15.0-2.el9ap
python3.12-ecdsa (Red Hat package) - addressed in versions 0.18.0-2.el8ap, 0.18.0-2.el9ap
python3.12-rpds-py (Red Hat package) - addressed in versions 0.18.1-3.el8ap, 0.18.1-3.el9ap
python3.12-ruamel-yaml (Red Hat package) - addressed in versions 0.18.15-2.el8ap, 0.18.15-2.el9ap
python3.12-prometheus-client (Red Hat package) - addressed in versions 0.19.0-2.el8ap, 0.19.0-2.el9ap
python3.12-openapi-core (Red Hat package) - addressed in versions 0.19.1-2.el8ap, 0.19.1-2.el9ap
python3.12-pulp-glue (Red Hat package) - addressed in versions 0.23.2-2.el8ap, 0.23.2-2.el9ap
python3.12-pulp-ansible (Red Hat package) - addressed in versions 0.25.1-2.el8ap, 0.25.1-2.el9ap
python3.12-drf-spectacular (Red Hat package) - addressed in versions 0.26.5-3.el8ap, 0.26.5-3.el9ap
python3.12-validators (Red Hat package) - addressed in versions 0.34.0-2.el8ap, 0.34.0-2.el9ap
python3.12-referencing (Red Hat package) - addressed in versions 0.36.2-3.el8ap, 0.36.2-3.el9ap
python3.12-wheel (Red Hat package) - update to 0.41.2-4.el8_10
python3.12-drf-nested-routers (Red Hat package) - addressed in versions 0.93.5-2.el8ap, 0.93.5-2.el9ap
python3.12-mypy-extensions (Red Hat package) - addressed in versions 1.0.0-2.el8ap, 1.0.0-2.el9ap
python3.12-ansible-sdk (Red Hat package) - addressed in versions 1.0.0-3.el8ap, 1.0.0-3.el9ap
python3.12-janus (Red Hat package) - addressed in versions 1.0.0-3.el8ap, 1.0.0-3.el9ap
python3.12-ldap-filter (Red Hat package) - addressed in versions 1.0.1-2.el8ap, 1.0.1-2.el9ap
python3.12-resolvelib (Red Hat package) - addressed in versions 1.0.1-2.el8ap, 1.0.1-2.el9ap
python3.12-jmespath (Red Hat package) - addressed in versions 1.0.1-3.el8ap, 1.0.1-3.el9ap
python3.12-asyncio-throttle (Red Hat package) - addressed in versions 1.0.2-5.el8ap, 1.0.2-5.el9ap
python3.12-persisting-theory (Red Hat package) - addressed in versions 1.0-3.el8ap, 1.0-3.el9ap
python3.12-crontab (Red Hat package) - addressed in versions 1.0.5-1.el8ap, 1.0.5-1.el9ap
automation-controller-fapolicyd (Red Hat package) - addressed in versions 1.0-6.el8ap, 1.0-6.el9ap
python3.12-djangorestframework-queryfields (Red Hat package) - addressed in versions 1.1.0-2.el8ap, 1.1.0-2.el9ap
python3.12-et-xmlfile (Red Hat package) - addressed in versions 1.1.0-4.el8ap, 1.1.0-4.el9ap
python3.12-pytest-sugar (Red Hat package) - addressed in versions 1.1.1-2.el8ap, 1.1.1-2.el9ap
python3.12-django-lifecycle (Red Hat package) - addressed in versions 1.1.2-2.el8ap, 1.1.2-2.el9ap
ansible-rulebook (Red Hat package) - addressed in versions 1.1.7-2.el8ap, 1.1.7-2.el9ap
automation-eda-controller (Red Hat package) - addressed in versions 1.1.16-1.el8ap, 1.1.16-1.el9ap
python3.12-brotli (Red Hat package) - addressed in versions 1.2.0-1.el8ap, 1.2.0-1.el9ap
python3.12-django-split-settings (Red Hat package) - addressed in versions 1.2.0-3.el8ap, 1.2.0-3.el9ap
python3.12-netaddr (Red Hat package) - addressed in versions 1.2.1-2.el8ap, 1.2.1-2.el9ap
python3.12-ansible-pylibssh (Red Hat package) - addressed in versions 1.2.2-2.el8ap, 1.2.2-2.el9ap
python3.12-enrich (Red Hat package) - addressed in versions 1.2.7-3.el8ap, 1.2.7-3.el9ap
python3.12-deprecated (Red Hat package) - addressed in versions 1.2.14-2.el8ap, 1.2.14-2.el9ap
python3.12-onigurumacffi (Red Hat package) - addressed in versions 1.3.0-2.el8ap, 1.3.0-2.el9ap
python3.12-xlwt (Red Hat package) - addressed in versions 1.3.0-5.el8ap, 1.3.0-5.el9ap
python3.12-requests-oauthlib (Red Hat package) - addressed in versions 1.3.1-2.el8ap, 1.3.1-2.el9ap
python3.12-parsley (Red Hat package) - addressed in versions 1.3-4.el8ap, 1.3-4.el9ap
python3.12-xmlsec (Red Hat package) - addressed in versions 1.3.13-3.el8ap, 1.3.13-3.el9ap
python3.12-aiosignal (Red Hat package) - addressed in versions 1.4.0-1.el8ap, 1.4.0-1.el9ap
python3.12-frozenlist (Red Hat package) - addressed in versions 1.4.0-2.el8ap, 1.4.0-2.el9ap
python3.12-odfpy (Red Hat package) - addressed in versions 1.4.1-9.el8ap, 1.4.1-9.el9ap
python3.12-url-normalize (Red Hat package) - addressed in versions 1.4.3-6.el8ap, 1.4.3-6.el9ap
python3.12-drf-access-policy (Red Hat package) - addressed in versions 1.5.0-2.el8ap, 1.5.0-2.el9ap
python3.12-freezegun (Red Hat package) - addressed in versions 1.5.5-1.el8ap, 1.5.5-1.el9ap
python3.12-jwcrypto (Red Hat package) - addressed in versions 1.5.6-2.el8ap, 1.5.6-2.el9ap
python3.12-jq (Red Hat package) - addressed in versions 1.6.0-2.el8ap, 1.6.0-2.el9ap
python3.12-pluggy (Red Hat package) - addressed in versions 1.6.0-2.el8ap, 1.6.0-2.el9ap
python3.12-pyproject-api (Red Hat package) - addressed in versions 1.6.1-2.el8ap, 1.6.1-2.el9ap
receptor (Red Hat package) - addressed in versions 1.6.3-4.el8ap, 1.6.3-4.el9ap
python3.12-uamqp (Red Hat package) - addressed in versions 1.6.8-2.el8ap, 1.6.8-2.el9ap
python-django (Ubuntu package) - addressed in versions 1.6.11-0ubuntu1.3+esm10, 1.8.7-1ubuntu5.15+esm11, 1:1.11.11-1ubuntu1.21+esm14, 2:2.2.12-1ubuntu0.29+esm7, 2:3.2.12-2ubuntu1.25, 3:4.2.11-1ubuntu1.14, 3:5.2.4-1ubuntu2.3
python3.12-websocket-client (Red Hat package) - addressed in versions 1.7.0-3.el8ap, 1.7.0-3.el9ap
python3.12-distro (Red Hat package) - addressed in versions 1.9.0-2.el8ap, 1.9.0-2.el9ap
python3.12-lazy-object-proxy (Red Hat package) - addressed in versions 1.10.0-2.el8ap, 1.10.0-2.el9ap
python3.12-pydantic (Red Hat package) - addressed in versions 1.10.15-2.el8ap, 1.10.15-2.el9ap
python3.12-django-storages (Red Hat package) - update to 1.14.2-3.el8ap
python3.12-markuppy (Red Hat package) - addressed in versions 1.14-5.el8ap, 1.14-5.el9ap
python3.12-django-dynamic-preferences (Red Hat package) - addressed in versions 1.16.0-2.el8ap, 1.16.0-2.el9ap
python3.12-wrapt (Red Hat package) - addressed in versions 1.16.0-2.el8ap, 1.16.0-2.el9ap
python3.12-python3-saml (Red Hat package) - addressed in versions 1.16.0-3.el8ap, 1.16.0-3.el9ap
python3.12-six (Red Hat package) - addressed in versions 1.17.0-1.el8ap, 1.17.0-1.el9ap
python3.12-yarl (Red Hat package) - addressed in versions 1.18.3-1.el8ap, 1.18.3-1.el9ap
python3.12-parse (Red Hat package) - addressed in versions 1.20.1-2.el8ap, 1.20.1-2.el9ap
python3.12-opentelemetry (Red Hat package) - addressed in versions 1.28.0-1.el8ap, 1.28.0-1.el9ap
python3.12-opentelemetry-contrib (Red Hat package) - addressed in versions 1.28.0-1.el8ap, 1.28.0-1.el9ap
python3.12-azure-core (Red Hat package) - addressed in versions 1.34.0-2.el8ap, 1.34.0-2.el9ap
python3.12-boto3 (Red Hat package) - addressed in versions 1.34.30-2.el8ap, 1.34.30-2.el9ap
python3.12-botocore (Red Hat package) - addressed in versions 1.34.162-2.el8ap, 1.34.162-2.el9ap
yamllint (Red Hat package) - addressed in versions 1.35.1-2.el8ap, 1.35.1-2.el9ap
python3.12-xds-protos (Red Hat package) - addressed in versions 1.71.2-1.el8ap, 1.71.2-1.el9ap
python3.12-grpcio (Red Hat package) - addressed in versions 1.71.2-1.el8ap, 1.71.2-1.el9ap
python3.12-googleapis-common-protos (Red Hat package) - addressed in versions 1.72.0-1.el8ap, 1.72.0-1.el9ap
python3.12-iniconfig (Red Hat package) - addressed in versions 2.0.0-2.el8ap, 2.0.0-2.el9ap
pulpcore-selinux (Red Hat package) - addressed in versions 2.0.1-2.el8ap, 2.0.1-2.el9ap
python3.12-croniter (Red Hat package) - addressed in versions 2.0.1-2.el8ap, 2.0.1-2.el9ap
python3.12-xlrd (Red Hat package) - addressed in versions 2.0.1-7.el8ap, 2.0.1-7.el9ap
python3.12-async-lru (Red Hat package) - addressed in versions 2.0.5-1.el8ap, 2.0.5-1.el9ap
uwsgi (Red Hat package) - addressed in versions 2.0.28-2.el8ap, 2.0.28-2.el9ap
python3.12-execnet (Red Hat package) - addressed in versions 2.1.2-2.el8ap, 2.1.2-2.el9ap
python3.12-markupsafe (Red Hat package) - addressed in versions 2.1.5-2.el8ap, 2.1.5-2.el9ap
python3.12-dpath (Red Hat package) - addressed in versions 2.1.6-2.el8ap, 2.1.6-2.el9ap
python3.12-backoff (Red Hat package) - addressed in versions 2.2.1-2.el8ap, 2.2.1-2.el9ap
python3-Django - addressed in versions 2.2.27-21, 4.2.15-12
python-django - addressed in versions 2.2.27-21, 4.2.15-12
python-django-help - addressed in versions 2.2.27-21, 4.2.15-12
python3.12-django-oauth-toolkit (Red Hat package) - addressed in versions 2.3.0-2.el8ap, 2.3.0-2.el9ap
python3.12-django-prometheus (Red Hat package) - addressed in versions 2.3.1-3.el8ap, 2.3.1-3.el9ap
python3.12-json-stream (Red Hat package) - addressed in versions 2.3.2-2.el8ap, 2.3.2-2.el9ap
python3.12-bracex (Red Hat package) - addressed in versions 2.4-2.el8ap, 2.4-2.el9ap
ansible-runner (Red Hat package) - addressed in versions 2.4.2-3.el8ap, 2.4.2-3.el9ap
python3.12-pyrad (Red Hat package) - addressed in versions 2.4-3.el8ap, 2.4-3.el9ap
Ansible Automation Platform - addressed in versions 2.5, 2.6
python3.12-pygtrie (Red Hat package) - addressed in versions 2.5.0-3.el8ap, 2.5.0-3.el9ap
ansible-automation-platform-installer (Red Hat package) - addressed in versions 2.5-21.el8ap, 2.5-21.el9ap
python3.12-django-ansible-base (Red Hat package) - addressed in versions 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap
automation-gateway (Red Hat package) - addressed in versions 2.5.20260225-1.el8ap, 2.5.20260225-1.el9ap
python3.12-aiohappyeyeballs (Red Hat package) - addressed in versions 2.6.1-1.el8ap, 2.6.1-1.el9ap
python3.12-rq (Red Hat package) - addressed in versions 2.6.1-1.el8ap, 2.6.1-1.el9ap
python3.12-tacacs-plus (Red Hat package) - addressed in versions 2.6-3.el8ap, 2.6-3.el9ap
python3.12-urllib3 (Red Hat package) - addressed in versions 2.6.3-2.el8ap, 2.6.3-2.el9ap
python3.12-pyjwt (Red Hat package) - addressed in versions 2.7.0-3.el8ap, 2.7.0-3.el9ap
python3.12-dateutil (Red Hat package) - addressed in versions 2.8.2-3.el8ap, 2.8.2-3.el9ap
python3.12-semantic-version (Red Hat package) - addressed in versions 2.10.0-3.el8ap, 2.10.0-3.el9ap
python3.12-pycodestyle (Red Hat package) - addressed in versions 2.11.1-2.el8ap, 2.11.1-2.el9ap
bindep (Red Hat package) - addressed in versions 2.13.0-2.el8ap, 2.13.0-2.el9ap
ansible-core (Red Hat package) - addressed in versions 2.16.16-1.el8ap, 2.16.16-1.el9ap
python3.12-pygments (Red Hat package) - addressed in versions 2.17.2-3.el8ap, 2.17.2-3.el9ap
python3.12-pulp-container (Red Hat package) - addressed in versions 2.19.3-2.el8ap, 2.19.3-2.el9ap
python3.12-google-auth (Red Hat package) - addressed in versions 2.27.0-2.el8ap, 2.27.0-2.el9ap
python3.12-requests (Red Hat package) - addressed in versions 2.31.0-4.el8ap, 2.31.0-4.el9ap
python3.12-werkzeug (Red Hat package) - addressed in versions 3.0.3-2.el8ap, 3.0.3-2.el9ap
python3.12-django-ipware (Red Hat package) - addressed in versions 3.0.7-4.el8ap, 3.0.7-4.el9ap
python3.12-pyflakes (Red Hat package) - addressed in versions 3.1.0-2.el8ap, 3.1.0-2.el9ap
python3.12-termcolor (Red Hat package) - addressed in versions 3.1.0-2.el8ap, 3.1.0-2.el9ap
ansible-builder (Red Hat package) - addressed in versions 3.1.1-1.2.el8ap, 3.1.1-1.2.el9ap
python3.12-pyparsing (Red Hat package) - addressed in versions 3.1.1-2.el8ap, 3.1.1-2.el9ap
python3.12-django-picklefield (Red Hat package) - addressed in versions 3.1-2.el8ap, 3.1-2.el9ap
python3.12-openpyxl (Red Hat package) - addressed in versions 3.1.2-2.el8ap, 3.1.2-2.el9ap
python3.12-daemon (Red Hat package) - addressed in versions 3.1.2-3.el8ap, 3.1.2-3.el9ap
python3.12-jinja2 (Red Hat package) - addressed in versions 3.1.6-2.el8ap, 3.1.6-2.el9ap
python3.12-gitpython (Red Hat package) - addressed in versions 3.1.41-2.el8ap, 3.1.41-2.el9ap
python3.12-aiodns (Red Hat package) - addressed in versions 3.2.0-2.el8ap, 3.2.0-2.el9ap
python3.12-python3-openid (Red Hat package) - addressed in versions 3.2.0-4.el8ap, 3.2.0-4.el9ap
python3.12-django-rq (Red Hat package) - addressed in versions 3.2.2-1.el8ap, 3.2.2-1.el9ap
python3.12-oauthlib (Red Hat package) - addressed in versions 3.2.2-2.el8ap, 3.2.2-2.el9ap
python3.12-psycopg (Red Hat package) - addressed in versions 3.2.7-2.el8ap, 3.2.7-2.el9ap
python3.12-dynaconf (Red Hat package) - addressed in versions 3.2.11-2.el8ap, 3.2.11-2.el9ap
python-django (Debian package) - addressed in versions 3:3.2.25-0+deb12u2, 3:4.2.28-0+deb13u1
python3.12-django-import-export (Red Hat package) - addressed in versions 3.3.6-3.el8ap, 3.3.6-3.el9ap
python3.12-django-guid (Red Hat package) - addressed in versions 3.4.0-2.el8ap, 3.4.0-2.el9ap
python3.12-xxhash (Red Hat package) - addressed in versions 3.4.1-2.el8ap, 3.4.1-2.el9ap
python3.12-ldap (Red Hat package) - addressed in versions 3.4.5-1.el8ap, 3.4.5-1.el9ap
python3.12-tablib (Red Hat package) - addressed in versions 3.5.0-2.el8ap, 3.5.0-2.el9ap
python3.12-markdown (Red Hat package) - addressed in versions 3.5.2-2.el8ap, 3.5.2-2.el9ap
python3.12-asgiref (Red Hat package) - addressed in versions 3.7.2-2.el8ap, 3.7.2-2.el9ap
python3.12-pytest-xdist (Red Hat package) - addressed in versions 3.8.0-2.el8ap, 3.8.0-2.el9ap
python3.12-filelock (Red Hat package) - addressed in versions 3.13.1-2.el8ap, 3.13.1-2.el9ap
python3.12-aiohttp (Red Hat package) - addressed in versions 3.13.3-2.el8ap, 3.13.3-2.el9ap
python3.12-djangorestframework (Red Hat package) - addressed in versions 3.15.1-2.el8ap, 3.15.1-2.el9ap
python3.12-zipp (Red Hat package) - addressed in versions 3.19.2-2.el8ap, 3.19.2-2.el9ap
python3.12-marshmallow (Red Hat package) - addressed in versions 3.26.2-1.el8ap, 3.26.2-1.el9ap
python3.12-pulpcore (Red Hat package) - addressed in versions 3.49.50-1.el8ap, 3.49.50-1.el9ap
python3.12-django-auth-ldap (Red Hat package) - addressed in versions 4.0.0-3.el8ap, 4.0.0-3.el9ap
python3.12-daphne (Red Hat package) - addressed in versions 4.0.0-4.el8ap, 4.0.0-4.el9ap
python3.12-channels (Red Hat package) - addressed in versions 4.0.0-4.el8ap, 4.0.0-4.el9ap
python3.12-gitdb (Red Hat package) - addressed in versions 4.0.11-2.el8ap, 4.0.11-2.el9ap
python3.12-uritemplate (Red Hat package) - addressed in versions 4.1.1-4.el8ap, 4.1.1-4.el9ap
python3.12-django-extensions (Red Hat package) - addressed in versions 4.1-2.el8ap, 4.1-2.el9ap
python3.12-platformdirs (Red Hat package) - addressed in versions 4.2.0-2.el8ap, 4.2.0-2.el9ap
supervisor (Red Hat package) - addressed in versions 4.2.5-2.el8ap, 4.2.5-2.el9ap
python311-Django - update to 4.2.11-150600.3.47.1
python3-django-bash-completion - update to 4.2.16-6
python3-django-doc - update to 4.2.16-6
python3-django - update to 4.2.16-6
python3.12-django (Red Hat package) - addressed in versions 4.2.28-1.el8ap, 4.2.28-1.el9ap
python-django4.2 - addressed in versions 4.2.28-1.el9, 4.2.28-1.fc42
python3.12-pycares (Red Hat package) - addressed in versions 4.4.0-3.el8ap, 4.4.0-3.el9ap
python3.12-social-auth-core (Red Hat package) - addressed in versions 4.5.4-2.el8ap, 4.5.4-2.el9ap
python3.12-redis (Red Hat package) - addressed in versions 4.6.0-3.el8ap, 4.6.0-3.el9ap
automation-controller (Red Hat package) - addressed in versions 4.6.26-1.el8ap, 4.6.26-1.el9ap
python3.12-pexpect (Red Hat package) - addressed in versions 4.9.0-2.el8ap, 4.9.0-2.el9ap
python3.12-rsa (Red Hat package) - addressed in versions 4.9-3.el8ap, 4.9-3.el9ap
python3.12-galaxy-ng (Red Hat package) - addressed in versions 4.10.12-1.el8ap, 4.10.12-1.el9ap
automation-hub (Red Hat package) - addressed in versions 4.10.12-1.el8ap, 4.10.12-1.el9ap
python3.12-typing-extensions (Red Hat package) - addressed in versions 4.15.0-2.el8ap, 4.15.0-2.el9ap
python3.12-tox (Red Hat package) - addressed in versions 4.15.1-2.el8ap, 4.15.1-2.el9ap
python3.12-jsonschema (Red Hat package) - addressed in versions 4.21.1-2.el8ap, 4.21.1-2.el9ap
python3.12-smmap (Red Hat package) - addressed in versions 5.0.1-2.el8ap, 5.0.1-2.el9ap
python3.12-watchdog (Red Hat package) - addressed in versions 5.0.2-2.el8ap, 5.0.2-2.el9ap
python3.12-django-flags (Red Hat package) - addressed in versions 5.0.13-2.el8ap, 5.0.13-2.el9ap
python3.12-chardet (Red Hat package) - addressed in versions 5.2.0-3.el8ap, 5.2.0-3.el9ap
python-django5 - addressed in versions 5.2.11-1.fc42, 5.2.11-1.fc43
python3.12-lxml (Red Hat package) - addressed in versions 5.3.0-2.el8ap, 5.3.0-2.el9ap
python3.12-cachetools (Red Hat package) - addressed in versions 5.3.2-2.el8ap, 5.3.2-2.el9ap
python3.12-podman (Red Hat package) - addressed in versions 5.4.0.1-2.el8ap, 5.4.0.1-2.el9ap
python3.12-django-redis (Red Hat package) - addressed in versions 5.4.0-2.el8ap, 5.4.0-2.el9ap
python3.12-social-auth-app-django (Red Hat package) - addressed in versions 5.4.1-2.el8ap, 5.4.1-2.el9ap
python3.12-protobuf (Red Hat package) - addressed in versions 5.29.6-1.el8ap, 5.29.6-1.el9ap
python3.12-pbr (Red Hat package) - addressed in versions 6.0.0-3.el8ap, 6.0.0-3.el9ap
python3.12-importlib-metadata (Red Hat package) - addressed in versions 6.0.1-3.el8ap, 6.0.1-3.el9ap
python3.12-multidict (Red Hat package) - addressed in versions 6.0.4-2.el8ap, 6.0.4-2.el9ap
python3.12-flake8 (Red Hat package) - addressed in versions 6.1.0-3.el8ap, 6.1.0-3.el9ap
python3.12-zope-interface (Red Hat package) - addressed in versions 6.1-2.el8ap, 6.1-2.el9ap
python3.12-whitenoise (Red Hat package) - addressed in versions 6.6.0-2.el8ap, 6.6.0-2.el9ap
python3.12-click (Red Hat package) - addressed in versions 8.1.7-2.el8ap, 8.1.7-2.el9ap
python3.12-wcmatch (Red Hat package) - addressed in versions 8.5-2.el8ap, 8.5-2.el9ap
python3.12-pytest (Red Hat package) - addressed in versions 9.0.1-2.el8ap, 9.0.1-2.el9ap
python3.12-more-itertools (Red Hat package) - addressed in versions 10.2.0-2.el8ap, 10.2.0-2.el9ap
python3.12-pillow (Red Hat package) - addressed in versions 10.3.0-2.el8ap, 10.3.0-2.el9ap
python3.12-pillow-debugsource (Red Hat package) - update to 10.3.0-2.el9ap
python3.12-azure-storage-blob (Red Hat package) - update to 12.19.0-2.el8ap
python3.12-rich (Red Hat package) - addressed in versions 13.1.0-2.el8ap, 13.1.0-2.el9ap
python3.12-websockets (Red Hat package) - addressed in versions 15.0-3.el8ap, 15.0-3.el9ap
python3.12-virtualenv (Red Hat package) - addressed in versions 20.25.1-2.el8ap, 20.25.1-2.el9ap
python3.12-hyperlink (Red Hat package) - addressed in versions 21.0.0-3.el8ap, 21.0.0-3.el9ap
python3.12-service-identity (Red Hat package) - addressed in versions 21.1.0-3.el8ap, 21.1.0-3.el9ap
python3.12-argon2-cffi-bindings (Red Hat package) - addressed in versions 21.2.0-2.el8ap, 21.2.0-2.el9ap
python3.12-attrs (Red Hat package) - addressed in versions 22.2.0-2.el8ap, 22.2.0-2.el9ap
python3.12-Automat (Red Hat package) - addressed in versions 22.10.0-4.el8ap, 22.10.0-4.el9ap
python3.12-gunicorn (Red Hat package) - addressed in versions 23.0.0-2.el8ap, 23.0.0-2.el9ap
python3.12-argon2-cffi (Red Hat package) - addressed in versions 23.1.0-2.el8ap, 23.1.0-2.el9ap
python3.12-txaio (Red Hat package) - addressed in versions 23.1.1-3.el8ap, 23.1.1-3.el9ap
python3.12-aiofiles (Red Hat package) - addressed in versions 23.2.1-2.el8ap, 23.2.1-2.el9ap
python3.12-packaging (Red Hat package) - addressed in versions 23.2-2.el8, 23.2-2.el9
python3.12-django-filter (Red Hat package) - addressed in versions 23.5-2.el8ap, 23.5-2.el9ap
python3.12-constantly (Red Hat package) - addressed in versions 23.10.4-1.el8ap, 23.10.4-1.el9ap
python3.12-pyOpenSSL (Red Hat package) - addressed in versions 24.1.0-2.el8ap, 24.1.0-2.el9ap
python3.12-autobahn (Red Hat package) - addressed in versions 24.4.2-2.el8ap, 24.4.2-2.el9ap
python3.12-black (Red Hat package) - addressed in versions 24.4.2-3.el8ap, 24.4.2-3.el9ap
python3.12-twisted (Red Hat package) - addressed in versions 24.7.0-2.el8ap, 24.7.0-2.el9ap
python3.12-incremental (Red Hat package) - addressed in versions 24.7.2-2.el8ap, 24.7.2-2.el9ap
ansible-creator (Red Hat package) - addressed in versions 25.12.0-1.1.el8ap, 25.12.0-1.1.el9ap
molecule (Red Hat package) - addressed in versions 25.12.0-2.el8ap, 25.12.0-2.el9ap
python3.12-pytest-ansible (Red Hat package) - addressed in versions 25.12.0-2.el8ap, 25.12.0-2.el9ap
python3.12-tox-ansible (Red Hat package) - addressed in versions 25.12.0-2.el8ap, 25.12.0-2.el9ap
python3.12-ansible-compat (Red Hat package) - addressed in versions 25.12.0-3.el8ap, 25.12.0-3.el9ap
ansible-dev-environment (Red Hat package) - addressed in versions 25.12.2-1.2.el8ap, 25.12.2-1.2.el9ap
python3.12-kubernetes (Red Hat package) - addressed in versions 26.1.0-3.el8ap, 26.1.0-3.el9ap
ansible-dev-tools (Red Hat package) - addressed in versions 26.1.0-3.el8ap, 26.1.0-3.el9ap
ansible-lint (Red Hat package) - addressed in versions 26.1.0-3.el8ap, 26.1.0-3.el9ap
ansible-navigator (Red Hat package) - addressed in versions 26.1.1-1.1.el8ap, 26.1.1-1.1.el9ap
python3.12-cryptography (Red Hat package) - addressed in versions 42.0.5-2.el8ap, 42.0.5-2.el9ap
python3.12-setuptools (Red Hat package) - update to 68.2.2-5.el9_6
python3.12-certifi (Red Hat package) - addressed in versions 2023.5.7-2.el8ap, 2023.5.7-2.el9ap
python3.12-jsonschema-specifications (Red Hat package) - addressed in versions 2023.12.1-2.el8ap, 2023.12.1-2.el9ap
python3.12-pytz (Red Hat package) - addressed in versions 2024.1-2.el8ap, 2024.1-2.el9ap
python3.12-uuid6 (Red Hat package) - addressed in versions 2024.1.12-2.el8ap, 2024.1.12-2.el9ap
python3.12-dispatcherd (Red Hat package) - addressed in versions 2025.5.19-3.el8ap, 2025.5.19-3.el9ap
python3.12-diff-match-patch (Red Hat package) - addressed in versions 20230430-2.el8ap, 20230430-2.el9ap

• https://www.djangoproject.com/weblog/2026/feb/03/security-releases/

• Multiple vulnerabilities in Django
• Ubuntu update for python-django
• openEuler 24.03 LTS SP3 update for python-django
• openEuler 24.03 LTS SP1 update for python-django
• openEuler 24.03 LTS update for python-django
• SUSE update for python-Django
• openEuler 24.03 LTS SP2 update for python-django
• openEuler 22.03 LTS SP4 update for python-django
• Fedora 42 update for python-django5
• Fedora 43 update for python-django5
• Fedora 42 update for python-django4.2
• Fedora EPEL 9 update for python-django4.2
• Debian update for python-django
• Anolis OS update for python-django
• openEuler 20.03 LTS SP4 update for python-django
• Multiple vulnerabilities in IBM Edge Data Collector
• Multiple vulnerabilities in Ansible Automation Platform 2.5 packages
• Multiple vulnerabilities in Ansible Automation Platform 2.6 packages