CVE-2021-30459: Jazzband Django Debug Toolbar

Critical severity, CVSS 9.8. EPSS: 1.9% chance of exploitation in the next 30 days.

A SQL Injection issue in the SQL Panel in Jazzband Django Debug Toolbar before 1.11.1, 2.x before 2.2.1, and 3.x before 3.2.1 allows attackers to execute SQL statements by changing the raw_sql input field of the SQL explain, analyze, or select form.

Affected products

• Jazzband Django Debug Toolbar: from 0.10.0, before 1.11.1 (fixed in 1.11.1); from 2.0.0, before 2.2.1 (fixed in 2.2.1); from 3.0.0, before 3.2.1 (fixed in 3.2.1)

Published 2021-04-14. Last modified 2026-06-17.