Login Request a demo
SQ
Product
Sqlalchemy
by Sqlalchemy · last CVE Feb 20, 2019
3
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities3In the news0Timeline
Severity mix
Critical 1High 1Medium 0Low 0
Severity
All severities3Critical1High1Medium0Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Sqlalchemy to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2019-7164
9.8
4%
Feb 20
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter
Affected: through 1.2.17; 1.3.0; 1.3.0
CVE-2019-7548
7.8
2%
Feb 6
SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled
Affected: 1.2.17
CVE-2012-0805
–
3%
Jun 5
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset…
Affected: through 0.7.0; 0.6.0; 0.6.0; 0.6.0; 0.6.0; 0.6.1; +8 more
Showing 3