SQL injection in JSONField KeyTransform

The vulnerability is in: https://github.com/django/django/blob/main/tests/model_fields/test_jsonfield.py#L427 I created a function and added it to the "test_jsonfield.py" to explain the vulnerability (POC).

    def test_sqli(self):

        # say a to get value b
        # say b to get value c
        # say " for syntax error in sql
        user_input = "b"

        NullableJSONModel.objects.create(value_custom={"a": "b"})
        NullableJSONModel.objects.create(value_custom={"b": "c"})
        qs = …