Skip to content
OpenAdvisories

Package · PyPI

tortoise-orm

1 known vulnerabilities.

1 result · Feed

  • Medium 6.3

    SQL injection in Tortoise ORM

    In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, starts_with, or ends…