Skip to content
OpenAdvisories

Vendor

ormar-orm

1 known vulnerabilities.

Products

ormar 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-27953

    ormar has a Pydantic Validation Bypass via Kwargs Injection in Model Constructor

    ormar is a async mini ORM for Python. Versions 0.23.0 and below are vulnerable to Pydantic validation bypass through the model constructor, allowing any unauthenticated user to skip all field validation by injecting "__pk_only__": true into a JSON request bod…

    ormar-orm ormar ormar ormar Debian Ubuntu PyPI