Lucene search
+L

2 matches found

OSV
OSV
•added 2026/03/19 9:17 p.m.•19 views

UBUNTU-CVE-2026-27953

ormar is a async mini ORM for Python. Versions 0.23.0 and below are vulnerable to Pydantic validation bypass through the model constructor, allowing any unauthenticated user to skip all field validation by injecting "pkonly": true into a JSON request body. By injecting "pkonly": true into a JSON...

9.8CVSS5.7AI score0.00906EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/03/19 12:00 a.m.•88 views

ormar 安全漏洞

ORMar is a Python ORM library developed by Collerek’s individual developers. Versions of Ormar prior to 0.23.0 contain security vulnerabilities. These vulnerabilities stem from Pydantic validation bypasses in the model constructor. This allows unvalidated users to bypass field validations by...

9.8CVSS5.7AI score0.00906EPSS
SaveExploits1References9
Rows per page
Query Builder