43 matches found
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / Pro Realtime 24.04 LTS : python-sql vulnerability (USN-8765-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS / 24.04 LTS / Pro Realtime 24.04 LTS host has packages installed that are affected by a vulnerability as referenced in the USN-8765-1 advisory. Cdric Krier discovered that python-sql incorrectly escaped values passed to unary operators. An...
USN-8765-1 python-sql vulnerability
Cédric Krier discovered that python-sql incorrectly escaped values passed to unary operators. An attacker could possibly use this issue to perform SQL injection attacks...
USN-8765-1: python-sql vulnerability
Cédric Krier discovered that python-sql incorrectly escaped values passed to unary operators. An attacker could possibly use this issue to perform SQL injection attacks...
Linux Distros Unpatched Vulnerability : CVE-2026-84305
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - sqlparse is a non-validating SQL parser module for Python. Prior to 0.6.0, sqlparse.formatsql, reindent=True and sqlformat --reindent route attacker-controlled...
pavo-cristatus (>=0.4.1.0, <=0.5.7.0) potentially affected by CVE-2024-9774 via python-sql (1.1.0)
python-sql PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-sql and may be impacted: - pavo-cristatus =0.4.1.0, =0.5.7.0 Source cves: CVE-2024-9774 Source advisory: OSV:PYSEC-2026-1855...
python-sql SQL injection vulnerability
A vulnerability was found in python-sql where unary operators do not escape non-Expression like And and Or which makes any system exposing those vulnerable to an SQL injection attack...
EUVD-2024-3604
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-9774
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in python-sql where unary operators do not escape non-Expression. CVE-2024-9774 Note that Nessus relies on the presence of the package...
Fedora: Security Advisory (FEDORA-2024-1a2f1733ad)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
openSUSE Security Advisory (openSUSE-SU-2024:0413-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
SQL Injection
python-sql is vulnerable to SQL Injection. The vulnerability is due to insufficient input sanitization and improper handling of unary operators in the python-sql library. Specifically, non-Expression values are not properly escaped, allowing them to be inserted into SQL queries without proper...
pavo-cristatus (>=0.4.1.0, <=0.5.7.0) potentially affected by CVE-2024-9774 via python-sql (1.1.0)
python-sql PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-sql and may be impacted: - pavo-cristatus =0.4.1.0, =0.5.7.0 Source cves: CVE-2024-9774 Source advisory: OSV:GHSA-PQ9P-PC3P-9HM4...
python-sql SQL injection vulnerability
A vulnerability was found in python-sql where unary operators do not escape non-Expression like And and Or which makes any system exposing those vulnerable to an SQL injection attack...
GHSA-PQ9P-PC3P-9HM4 python-sql SQL injection vulnerability
A vulnerability was found in python-sql where unary operators do not escape non-Expression like And and Or which makes any system exposing those vulnerable to an SQL injection attack...
SQL Injection
Overview python-sql is a Library to write SQL queries Affected versions of this package are vulnerable to SQL Injection due to improper escape of non-Expression for unary operators. Remediation Upgrade python-sql to version 1.5.2 or higher. References - Commit - Issue - Security Release Credit:...
pavo-cristatus (>=0.4.1.0, <=0.5.7.0) potentially affected by CVE-2024-9774 via python-sql (1.1.0)
python-sql PYPI version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on python-sql and may be impacted: - pavo-cristatus =0.4.1.0, =0.5.7.0 Source cves: CVE-2024-9774 Source advisory: SNYK:PYTHON-PYTHONSQL-8551198...
CVE-2024-9774
A vulnerability was found in python-sql where unary operators do not escape non-Expression...
CVE-2024-9774
A vulnerability was found in python-sql where unary operators do not escape non-Expression...
