The vulnerability of the library for working with relational DBMSs like SQLAlchemy lies in the lack of protective measures for SQL query structures, allowing attackers to execute arbitrary code.

The vulnerability of the library for working with relational DBMSs like SQLAlchemy is related to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

OESA-2021-1039 python-sqlalchemy security update

SQLAlchemy is an Object Relational Mapper ORM that provides a flexible, high-level interface to SQL databases. It contains a powerful mapping layer that users can choose to work as automatically or as manually, determining relationships based on foreign keys or to bridge the gap between database...

CentOS 8 : python27:2.7 (CESA-2019:0981)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:0981 advisory. - python-sqlalchemy: SQL Injection when the orderby parameter can be controlled CVE-2019-7164 - python-sqlalchemy: SQL Injection when the groupby...

CentOS 8 : python36:3.6 (CESA-2019:0984)

The remote CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CESA-2019:0984 advisory. - python-sqlalchemy: SQL Injection when the orderby parameter can be controlled CVE-2019-7164 - python-sqlalchemy: SQL Injection when the groupby...

Huawei EulerOS: Security Advisory for python-sqlalchemy (EulerOS-SA-2020-2530)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP8 : python-sqlalchemy (EulerOS-SA-2020-2530)

According to the version of the python-sqlalchemy packages installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled.CVE-2019-7548 Note that Tenable Network Security has...

Huawei EulerOS: Security Advisory for python-sqlalchemy (EulerOS-SA-2020-2391)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP2 : python-sqlalchemy (EulerOS-SA-2020-2391)

According to the version of the python-sqlalchemy package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled.CVE-2019-7548 Note that Tenable Network Security has...

EulerOS 2.0 SP5 : python-sqlalchemy (EulerOS-SA-2020-2297)

According to the version of the python-sqlalchemy package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled.CVE-2019-7548 Note that Tenable Network Security has...

Huawei EulerOS: Security Advisory for python-sqlalchemy (EulerOS-SA-2020-2297)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Huawei EulerOS: Security Advisory for python-sqlalchemy (EulerOS-SA-2020-2074)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

EulerOS 2.0 SP3 : python-sqlalchemy (EulerOS-SA-2020-2074)

According to the version of the python-sqlalchemy package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled.CVE-2019-7548 Note that Tenable Network Security has...

[SECURITY] Fedora 31 Update: python-flask-admin-1.5.6-1.fc31

Flask-Admin is advanced, extensible and simple to use administrative interf ace building extension for Flask framework. It comes with batteries included: model scaffolding for SQLAlchemy, MongoEngine, MongoDB and Peewee ORMs, simple file management interface and a lot of usage samples. You're not...

[SECURITY] Fedora 32 Update: python-flask-admin-1.5.6-1.fc32

Flask-Admin is advanced, extensible and simple to use administrative interf ace building extension for Flask framework. It comes with batteries included: model scaffolding for SQLAlchemy, MongoEngine, MongoDB and Peewee ORMs, simple file management interface and a lot of usage samples. You're not...

Fedora: Security Advisory for python-flask-admin (FEDORA-2020-e8f384af5f)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

SQL Injection

python-sqlalchemy is vulnerable to SQL injection. It was discovered that SQLAlchemy did not sanitize values for the limit and offset keywords for SQL select statements. If an application using SQLAlchemy accepted values for these keywords, and did not filter or sanitize them before passing them t...

CVE-2019-7164

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter...

openSUSE: Security Advisory for python-SQLAlchemy (openSUSE-SU-2019:2064-1)

The remote host is missing an update for the Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2019-7548

SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

MGASA-2019-0350 Updated python-sqlalchemy packages fix security vulnerabilities

Updated python-sqlalchemy packages fix security vulnerabilities: SQL Injection via the orderby parameter CVE-2019-7164. SQL Injection via the groupby parameter CVE-2019-7548...