Lucene search
+L

3 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/21 12:0 a.m.16 views

Linux Distros Unpatched Vulnerability : CVE-2026-27953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ormar is a async mini ORM for Python. Versions 0.23.0 and below are vulnerable to Pydantic validation bypass through the model constructor, allowing any...

9.8CVSS5.6AI score0.01192EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2026/03/19 4:27 p.m.8 views

ormar Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor

Summary A Pydantic validation bypass in ormar's model constructor allows any unauthenticated user to skip all field validation — type checks, constraints, @fieldvalidator/@modelvalidator decorators, choices enforcement, and required-field checks — by injecting "pkonly": true into a JSON request...

9.8CVSS6AI score0.01192EPSS
SaveExploits1References11Affected Software1
OSV
OSV
added 2026/03/19 4:27 p.m.7 views

GHSA-F964-WHRQ-44H8 ormar Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor

Summary A Pydantic validation bypass in ormar's model constructor allows any unauthenticated user to skip all field validation — type checks, constraints, @fieldvalidator/@modelvalidator decorators, choices enforcement, and required-field checks — by injecting "pkonly": true into a JSON request...

7.1CVSS6AI score0.01192EPSS
SaveExploits1References11
Rows per page
Query Builder