PYSEC-2019-54

SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

mettle (>=0.7.12, <=0.7.14), missingtvshows (1.1.0) +4 more potentially affected by CVE-2019-7548 via sqlalchemy (0.9.8)

sqlalchemy PYPI version 0.9.8 is affected by a known vulnerability. The following packages have a transitive dependency on sqlalchemy and may be impacted: - mettle =0.7.12, =0.1.0, =0.1.4, =0.1.1, =0.2.1 Source cves: CVE-2019-7548 Source advisory: OSV:PYSEC-2019-124...

UBUNTU-CVE-2019-7548

SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

aequitas (>=0.26.0, <=0.33.0), alembic-viz (0.1.0) +147 more potentially affected by CVE-2019-7548 via sqlalchemy (>=1.0.0, <=1.2.17)

sqlalchemy PYPI version =1.0.0, =0.26.0, =1.10.0, =0.10.0.dev0, =0.1.6, =1.0.0a0, =1.0.0, =0.0.4, =1.0.1a1, =0.6.7.post3, =0.0.2, =0.0.2, =0.0.2, =0.0.4, =0.0.7 and more Source cves: CVE-2019-7548 Source advisory: OSV:PYSEC-2019-124...

piecash (0.8.3), reahl-doc (>=3.1.0, <=3.2.0) +5 more potentially affected by CVE-2019-7548 via sqlalchemy (0.9.10)

sqlalchemy PYPI version 0.9.10 is affected by a known vulnerability. The following packages have a transitive dependency on sqlalchemy and may be impacted: - piecash 0.8.3 - reahl-doc =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.2.0 Source cves: CVE-2019-7548 Source advisory:...

Sql injection

SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

periodic2023 (>=2.2.0, <=2.2.1) potentially affected by CVE-2019-7548 via sqlalchemy (0.7.7)

sqlalchemy PYPI version 0.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on sqlalchemy and may be impacted: - periodic2023 =2.2.0, =2.2.1 Source cves: CVE-2019-7548 Source advisory: OSV:PYSEC-2019-124...

PYSEC-2019-124

SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

CVE-2019-7548

SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

CVE-2019-7548

SQLAlchemy 1.2.17 is affected by CVE-2019-7548 and allows SQL Injection when the group_by parameter can be controlled. Connected documents confirm the vulnerable component is SQLAlchemy 1.2.17 and describe the injection via group_by as the root cause. The sources do not provide specific exploit d...

aequitas (>=0.26.0, <=0.33.0), alembic-viz (0.1.0) +161 more potentially affected by CVE-2019-7548 via sqlalchemy (>=0.7.7, <=1.2.18)

sqlalchemy PYPI version =0.7.7, =0.26.0, =1.10.0, =0.10.0.dev0, =0.1.6, =1.0.0a0, =1.0.0, =0.0.4, =1.0.1a1, =0.6.7.post3, =0.0.2, =0.0.2, =0.0.2, =0.0.4, =0.0.7 and more Source cves: CVE-2019-7548 Source advisory: MEND:CVE-2019-7548...

CVE-2019-7548

SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

CVE-2019-7548

SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

CVE-2019-7548

SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled. Recent assessments: kevthehermit at April 23, 2020 8:30pm UTC reported: SQLAlchemy is one of the most popular ORMs for Python / SQL Database interaction. It is heavily used in python web applications with frameworks...

PT-2019-20142

Name of the Vulnerable Software and Affected Versions SQLAlchemy version 1.2.17 Description The issue allows for SQL Injection when the group by parameter can be controlled. Recommendations For version 1.2.17, consider restricting access to the group by parameter to prevent its manipulation until...

CVE-2019-7548: Improper Neutralization of Special Elements used in an SQL Command

SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

py39-sqlalchemy10 -- multiple SQL Injection vulnerabilities

21k reports: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter. nosecurity reports: SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

py39-sqlalchemy12 -- multiple SQL Injection vulnerabilities

21k reports: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter. nosecurity reports: SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

py39-sqlalchemy11 -- multiple SQL Injection vulnerabilities

21k reports: SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the orderby parameter. nosecurity reports: SQLAlchemy 1.2.17 has SQL Injection when the groupby parameter can be controlled...

PT-2019-5718

Name of the Vulnerable Software and Affected Versions SQLAlchemy versions 1.2.17 and earlier SQLAlchemy versions 1.3.x through 1.3.0b2 Description The issue is related to SQL injection via the order by parameter. This allows an attacker to potentially execute arbitrary code. The vulnerability is...