Skip to content
OpenAdvisories
Critical DSA-2449-1 1 CVE

sqlalchemy - missing input sanitization

Published Apr 12, 2012 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 6.0 sqlalchemy 0.6.3-3+squeeze1

Vulnerabilities 1

  • Critical 9.8
    CVE-2012-0805

    SQLAlchemy vulnerable to SQL injection

    Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit o…

    sqlalchemy sqlalchemy Debian PyPI