Django security releases issued: 4.0.6 and 3.2.14

[NewsBot]

A new Django blog post/announcement has been posted!

In accordance with our security release policy, the Django team is issuing Django 4.0.6 and Django 3.2.14. These release addresses the security issue detailed below. We encourage all users of Django to upgrade as soon as possible.

CVE-2022-34265: Potential SQL injection via Trunc(kind) and Extract(lookup_name) arguments

Trunc() and Extract() database functions were subject to SQL injection if untrusted data was used as a <tt class=...

Get the full details here: Django security releases issued: 4.0.6 and 3.2.14 | Weblog | Django