---
title: "Catatan terbitan Django 4.2.24"
version: 6.1
locale: id
source: https://docs.djangoproject.com/id/6.1/releases/4.2.24/
canonical: https://djangodocs.dev/id/6.1/releases/4.2.24/
---
# Catatan terbitan Django 4.2.24

*September 3, 2025*

Django 4.2.24 fixes a security issue with severity "high" in 4.2.23.

## CVE-2025-57833: Potential SQL injection in `FilteredRelation` column aliases

[`FilteredRelation`](/id/6.1/ref/models/querysets/#django.db.models.FilteredRelation) was subject to SQL injection in column aliases,
using a suitably crafted dictionary, with dictionary expansion, as the
`**kwargs` passed to [`QuerySet.annotate()`](/id/6.1/ref/models/querysets/#django.db.models.query.QuerySet.annotate) or [`QuerySet.alias()`](/id/6.1/ref/models/querysets/#django.db.models.query.QuerySet.alias).