angler-fishThe Vulnerability History Project

[1.11.x] Fixed CVE-2019-14234 -- Protected JSONField/HStoreField key and index lookups against SQL injection.

      Thanks to Sage M. Abdullah for the report and initial patch.
Thanks Florian Apolloner for reviews.
by Teresa the Ferret 2019-07-22 08:45:26 UTC
commit ed682a24fca774818542757651bfba576c3fc3ef
Django Fix CVE-2019-14234
django/contrib/postgres/fields/hstore.py
+1 -1
django/contrib/postgres/fields/jsonb.py
+5 -3
docs/releases/1.11.23.txt
-9
tests/postgres_tests/test_hstore.py
+1 -14
tests/postgres_tests/test_json.py
-14
expand_less