Skip to content
Threat Feed
Subscribe

Vendor

Django-Haystack

1 brief RSS
high advisory

Remote Code Execution via eval() in django-haystack Elasticsearch Deserialization

A critical remote code execution (RCE) vulnerability in the Elasticsearch backend of django-haystack allows attackers to execute arbitrary Python commands by manipulating `SearchField` aliases and indexed content, leading to full compromise of the Django application.

django-haystack rce python django elasticsearch deserialization supply-chain
1r 2t 2i