Skip to content
OpenAdvisories

Package · Debian

sqlalchemy

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Critical 9.8
    CVE-2019-7164

    SQLAlchemy vulnerable to SQL Injection via order_by parameter

    SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.

    sqlalchemy sqlalchemy sqlalchemy Debian Ubuntu PyPI
  • High 7.8
    CVE-2019-7548

    SQLAlchemy is vulnerable to SQL Injection via group_by parameter

    SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.

    sqlalchemy sqlalchemy sqlalchemy Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2012-0805

    SQLAlchemy vulnerable to SQL injection

    Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit o…

    sqlalchemy sqlalchemy Debian PyPI