CVE-2026-105315

Name of the Vulnerable Software and Affected Versions django-haystack versions prior to 3.4.0

Description Improper neutralization of directives in dynamically evaluated code occurs within the more like this Template Tag Handler. A remote attacker can exploit this by manipulating the result class argument in the to python() function located in the haystack/backends/elasticsearch backend.py file.

Recommendations Upgrade to version 3.4.0.