Skip to content
OpenAdvisories

Package · PyPI

products-sqlalchemyda

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2024-24811

    Products.SQLAlchemyDA vulnerable to unauthenticated arbitrary SQL query execution

    SQLAlchemyDA is a generic database adapter for ZSQL methods. A vulnerability found in versions prior to 2.2 allows unauthenticated execution of arbitrary SQL statements on the database to which the SQLAlchemyDA instance is connected. All users are affected. T…

    zopefoundation Products.SQLAlchemyDA products-sqlalchemyda PyPI