Package · Ubuntu

sqlalchemy

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.8

CVE-2019-7164

SQLAlchemy vulnerable to SQL Injection via order_by parameter

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.

sqlalchemy sqlalchemy sqlalchemy Debian Ubuntu PyPI

Feb 20, 2019