Vulnerabilities (CVE)

Filtered by vendor Sqlalchemy Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2019-7164 5 Debian, Opensuse, Oracle and 2 more 9 Debian Linux, Backports Sle, Leap and 6 more 2021-12-03 7.5 HIGH 9.8 CRITICAL
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.