On security impact "high"

The latest Django security release was impact high.

Super hard to exploit. You'd have to be accepting user submitter delimiters for data export or such, and then not validating them.

But allowing an SQL injection. So devastating if exploited.

https://www.djangoproject.com/weblog/2020/feb/03/security-releases/