Lucene search
+L

2 matches found

Tenable Nessus
Tenable Nessus
added 2026/03/21 12:0 a.m.17 views

Linux Distros Unpatched Vulnerability : CVE-2026-27953

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ormar is a async mini ORM for Python. Versions 0.23.0 and below are vulnerable to Pydantic validation bypass through the model constructor, allowing any...

9.8CVSS5.6AI score0.01192EPSS
SaveExploits1References3
OSV
OSV
added 2026/03/19 4:27 p.m.8 views

GHSA-F964-WHRQ-44H8 ormar Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor

Summary A Pydantic validation bypass in ormar's model constructor allows any unauthenticated user to skip all field validation — type checks, constraints, @fieldvalidator/@modelvalidator decorators, choices enforcement, and required-field checks — by injecting "pkonly": true into a JSON request...

7.1CVSS6AI score0.01192EPSS
SaveExploits1References11
Rows per page
Query Builder