Skip to content
OpenAdvisories
Medium DLA-4189-1 1 CVE

webpy - security update

Published May 29, 2025 · Updated Mar 9, 2026

Fixed packages 1

ReleasePackageFixed in
Debian · 11 webpy 1:0.61-1+deb11u1

Vulnerabilities 1

  • Medium 6.3

    webpy web.py db.py PostgresDB._process_insert_query sql injection

    A vulnerability, which was classified as critical, was found in webpy web.py 0.70. Affected is the function PostgresDB._process_insert_query of the file web/db.py. The manipulation of the argument seqname leads to sql injection. It is possible to launch the a…