CVE-2024-53908

score

<0.1

cvss

9.8

epss

1.4%

published

2024-12-06

kev added

—

first seen

2026-10-21

Django 5.1 < 5.1.4, 5.0 < 5.0.10, and 4.2 < 4.2.17 contain a SQL injection caused by direct usage of django.db.models.fields.json.HasKey lookup with untrusted data in Oracle databases, letting attackers execute arbitrary SQL commands, exploit requires untrusted data as lhs value.