Skip to content
OpenAdvisories

Package · Wolfi

mycli

8 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.2

    sqlparse: Generated Python and PHP snippets allow SQL string breakout through unescaped backslashes

    sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse/filters/output.py fails to escape existing backslashes before quotes in sqlparse.format output_format='python' and output_format='php' and the corresponding sqlformat -l modes…

  • Medium 6.9

    cryptography has a buffer overflow if non-contiguous buffers were passed to APIs

    cryptography is a package designed to expose cryptographic primitives and recipes to Python developers. From 45.0.0 to before 46.0.7, if a non-contiguous buffer was passed to APIs which accepted Python buffers (e.g. Hash.update()), this could lead to buffer o…