Skip to content
OpenAdvisories

Vendor

smithyhq

2 known vulnerabilities.

Products

sqladmin 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-46645 Public exploit

    SQLAdmin: Authorization Bypass on `ajax_lookup`

    SQLAdmin is a flexible Admin interface for SQLAlchemy models. Prior to version 0.25.1, the ajax_lookup endpoint in application.py bypasses the is_accessible() access control check that all other endpoints enforce. If a developer restricts model access by over…

    smithyhq sqladmin sqladmin PyPI