# Djangoproject Django


- [CVE-2014-0474](https://insights.sbomify.com/CVE-2014-0474/): Django Vulnerable to MySQL Injection (critical 10.0)
- [CVE-2026-4277](https://insights.sbomify.com/CVE-2026-4277/): Privilege abuse in GenericInlineModelAdmin (critical 9.8)
- [CVE-2024-53908](https://insights.sbomify.com/CVE-2024-53908/): Django SQL injection in HasKey(lhs, rhs) on Oracle (critical 9.8)
- [CVE-2024-42005](https://insights.sbomify.com/CVE-2024-42005/): Django SQL injection vulnerability (critical 9.8)
- [CVE-2023-31047](https://insights.sbomify.com/CVE-2023-31047/): Django bypasses validation when using one form field to upload multiple files (critical 9.8)
- [CVE-2022-34265](https://insights.sbomify.com/CVE-2022-34265/): Django `Trunc()` and `Extract()` database functions vulnerable to SQL Injection (critical 9.8)
- [CVE-2022-28346](https://insights.sbomify.com/CVE-2022-28346/): SQL Injection in Django (critical 9.8)
- [CVE-2022-28347](https://insights.sbomify.com/CVE-2022-28347/): SQL Injection in Django (critical 9.8)
- [CVE-2021-35042](https://insights.sbomify.com/CVE-2021-35042/): SQL Injection in Django (critical 9.8)
- [CVE-2020-7471](https://insights.sbomify.com/CVE-2020-7471/): SQL injection in Django (critical 9.8)
- [CVE-2019-19844](https://insights.sbomify.com/CVE-2019-19844/): Django Potential account hijack via password reset form (critical 9.8)
- [CVE-2019-14234](https://insights.sbomify.com/CVE-2019-14234/): SQL Injection in Django (critical 9.8)

---
From sbomify Insights: https://insights.sbomify.com/products/djangoproject/django/