Some thoughts around Django SQL Injection CVE-2025-64459

Fri, 07 Nov 2025 00:00:00 +0000

Vulnerability Overview

Yesterday I came across this CVE-2025-64459 and I was bit skeptical about the severity of the issue as it was marked as critical. So I decided to do a deep dive into the issue and see if it was a real issue or not. Turns out it was a real issue only if you’re meeting the following conditions:

You’re using Django Affected versions
- >= 5.2a1, < 5.2.8
- >= 5.0a1, < 5.1.14
- < 4.2.26
Source: request.GET or request.POST dict

Django on Shivasurya

Some thoughts around Django SQL Injection CVE-2025-64459

Vulnerability Overview