SQ
Vendor
sqlalchemy
7
CVEs
0
On KEV
1
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-102991 | MA mako sqlalchemy | 6.5 | Sep 30 | Mako: Path traversal via drive-letter URI on Windows in TemplateLookup |
| CVE-2026-44307 | MA mako sqlalchemy | 8.7 | May 12 | Mako: Path traversal via backslash URI on Windows in TemplateLookup |
| CVE-2026-41205 | MA mako sqlalchemy | 7.5 | Apr 23 | Mako: Path traversal via double-slash URI prefix in TemplateLookup |
| CVE-2022-40023 | MA Mako Sqlalchemy | 7.5 | Sep 7 | Sqlalchemy mako before 1.2.2 is vulnerable to Regular expression Denial of Service when using the Lexer class to parse |
| CVE-2019-7164 | SQ Sqlalchemy Sqlalchemy | 9.8 | Feb 20 | SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter |
| CVE-2019-7548 | SQ Sqlalchemy Sqlalchemy | 7.8 | Feb 6 | SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled |
| CVE-2012-0805 | SQ Sqlalchemy Sqlalchemy | – | Jun 5 | Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset… |