Skip to content
OpenAdvisories

Package · Debian

sqlalchemy

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2019-7164

    SQLAlchemy vulnerable to SQL Injection via order_by parameter

    SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.

    sqlalchemy sqlalchemy sqlalchemy Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2012-0805

    SQLAlchemy vulnerable to SQL injection

    Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit o…

    sqlalchemy sqlalchemy Debian PyPI