Skip to content

[pull] main from django:main#121

Merged
pull[bot] merged 4 commits intothreatcode:mainfrom
django:main
Oct 1, 2025
Merged

[pull] main from django:main#121
pull[bot] merged 4 commits intothreatcode:mainfrom
django:main

Conversation

@pull
Copy link
Copy Markdown

@pull pull Bot commented Oct 1, 2025 •
edited
Loading

See Commits and Changes for more details.

Created by pull[bot] (v2.0.0-alpha.4)

Can you help keep this open source service alive? 💖 Please sponsor : )

felixxm and others added 4 commits October 1, 2025 08:11
@felixxm @jacobtylerwalls
Fixed CVE-2025-59681 -- Protected QuerySet.annotate(), alias(), aggre…
41b43c7 
…gate(), and extra() against SQL injection in column aliases on MySQL/MariaDB.

Thanks sw0rd1ight for the report.

Follow up to 93cae5c.
@sarahboyce @jacobtylerwalls
Fixed CVE-2025-59682 -- Fixed potential partial directory-traversal v…
924a0c0 
…ia archive.extract().

Thanks stackered for the report.

Follow up to 05413af.
@jacobtylerwalls
Added stub release notes for 5.2.8.
1324d90
@jacobtylerwalls
Added CVE-2025-59681 and CVE-2025-59682 to security archive.
43d84ae
@pull pull Bot locked and limited conversation to collaborators Oct 1, 2025
@pull pull Bot added the ⤵️ pull label Oct 1, 2025
@pull pull Bot merged commit 43d84ae into threatcode:main Oct 1, 2025
4 checks passed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

No reviews

Assignees

No one assigned

Labels

⤵️ pull

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@felixxm @sarahboyce @jacobtylerwalls