Package · Ubuntu

sqlalchemy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Critical 9.8

CVE-2019-7164

SQLAlchemy vulnerable to SQL Injection via order_by parameter

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.

sqlalchemy sqlalchemy sqlalchemy Debian Ubuntu PyPI

Feb 20, 2019
High 7.8

CVE-2019-7548

SQLAlchemy is vulnerable to SQL Injection via group_by parameter

SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.

sqlalchemy sqlalchemy sqlalchemy Debian Ubuntu PyPI

Feb 6, 2019