CVE-2024-42005 — Django QuerySet SQL injection via JSON key lookups

A SQL injection in Django's QuerySet.values() + JSON key lookups with untrusted input allowed attacker-controlled lookup paths to append arbitrary SQL.