angler-fishThe Vulnerability History Project

[2.1.x] Fixed CVE-2019-14234 -- Protected JSONField/HStoreField key and index lookups against SQL injection.

      Thanks to Sage M. Abdullah for the report and initial patch.
Thanks Florian Apolloner for reviews.
by Teresa the Ferret 2019-07-22 08:45:26 UTC
commit f74b3ae3628c26e1b4f8db3d13a91d52a833a975
Django Fix CVE-2019-14234
django/contrib/postgres/fields/hstore.py
+1 -1
django/contrib/postgres/fields/jsonb.py
+5 -3
docs/releases/1.11.23.txt
-9
docs/releases/2.1.11.txt
-9
tests/postgres_tests/test_hstore.py
+1 -16
tests/postgres_tests/test_json.py
+1 -14
expand_less