
Example Vulnerable application for CVE-2025–57833
Example Vulnerable application for CVE-2025–57833
Django 4.2 before 4.2.24 Django 4.2 before 4.2.24, 5.1 before 5.1.12, and 5.2 before 5.2.6 is vulnerable to a SQL injection via Dictionary expansion as **kwargs is passed to QuerySet.annotate() or QuerySet.alias()
Currently a work in progress.
This is for educational purposes only.