Skip to content
OpenAdvisories

Vendor

piccolo-orm

4 known vulnerabilities.

Products

piccolo 2 piccolo_admin 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2023-47128

    piccolo SQL Injection via named transaction savepoints

    Piccolo is an object-relational mapping and query builder which supports asyncio. Prior to version 1.1.1, the handling of named transaction `savepoints` in all database implementations is vulnerable to SQL Injection via f-strings. While the likelihood of an e…

    piccolo-orm piccolo piccolo PyPI