Package · PyPI

sqlalchemy

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.8

CVE-2019-7548

SQLAlchemy is vulnerable to SQL Injection via group_by parameter

SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.

sqlalchemy sqlalchemy sqlalchemy Debian Ubuntu PyPI

Feb 6, 2019