Skip to content
OpenAdvisories

Product · tortoise

tortoise-orm

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    SQL injection in Tortoise ORM

    In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, starts_with, or ends…