{"cvss":9.8,"datePublished":"2023-10-04T12:00:00Z","dateUpdated":"2023-11-01T18:00:00Z","description":"Django 4.2 before 4.2.5 and 3.2 before 3.2.22 are affected by a potential SQL injection via certain aggregate functions.","id":"PYSEC-2023-192","metrics":{"cvssMetricV31":[{"cvssData":{"baseScore":9.8,"baseSeverity":"CRITICAL","version":"3.1"}}]},"severity":"CRITICAL","source":"pysec","title":"PySec: Django SQL Injection via Aggregates"}