21 matches found
CVE-2026-109449 Symfony: Unbounded Nesting in the Expression Parser Lets Untrusted Expressions Crash the Process
In Symfony Expression Language versions prior to 5.4.54, 6.4.48, 7.4.21, and 8.1.9, the parser of the ExpressionLanguage component built its node tree with no bound on its depth. An expression made of tens of thousands of nested unary operators, array literals, binary operators or property access...
USN-8765-1 python-sql vulnerability
Cédric Krier discovered that python-sql incorrectly escaped values passed to unary operators. An attacker could possibly use this issue to perform SQL injection attacks...
USN-8765-1: python-sql vulnerability
Cédric Krier discovered that python-sql incorrectly escaped values passed to unary operators. An attacker could possibly use this issue to perform SQL injection attacks...
python-sql SQL injection vulnerability
A vulnerability was found in python-sql where unary operators do not escape non-Expression like And and Or which makes any system exposing those vulnerable to an SQL injection attack...
PYSEC-2026-1855 python-sql SQL injection vulnerability
A vulnerability was found in python-sql where unary operators do not escape non-Expression like And and Or which makes any system exposing those vulnerable to an SQL injection attack...
EUVD-2024-3604
Malicious code in bioql PyPI...
Linux Distros Unpatched Vulnerability : CVE-2024-9774
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability was found in python-sql where unary operators do not escape non-Expression. CVE-2024-9774 Note that Nessus relies on the presence of the package...
GHSA-PQ9P-PC3P-9HM4 python-sql SQL injection vulnerability
A vulnerability was found in python-sql where unary operators do not escape non-Expression like And and Or which makes any system exposing those vulnerable to an SQL injection attack...
SQL Injection
Overview python-sql is a Library to write SQL queries Affected versions of this package are vulnerable to SQL Injection due to improper escape of non-Expression for unary operators. Remediation Upgrade python-sql to version 1.5.2 or higher. References - Commit - Issue - Security Release Credit:...
DEBIAN-CVE-2024-9774
A vulnerability was found in python-sql where unary operators do not escape non-Expression...
CVE-2024-9774
A vulnerability was found in python-sql where unary operators do not escape non-Expression...
CVE-2024-9774
A vulnerability was found in python-sql where unary operators do not escape non-Expression...
UBUNTU-CVE-2024-9774
A vulnerability was found in python-sql where unary operators do not escape non-Expression...
CVE-2024-9774 Python-sql: python-sql unary operators does not escape non-expression
A vulnerability was found in python-sql where unary operators do not escape non-Expression...
CVE-2024-9774
A vulnerability was found in python-sql where unary operators do not escape non-Expression...
CVE-2024-9774
A vulnerability was found in python-sql where unary operators do not escape non-Expression...
CVE-2024-9774: Improper Neutralization of Escape, Meta, or Control Sequences
A vulnerability was found in python-sql where unary operators do not escape non-Expression...
openSUSE 15 Security Update : python-python-sql (openSUSE-SU-2024:0412-1)
The remote openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the openSUSE- SU-2024:0412-1 advisory. - CVE-2024-9774: Fixed that unary operators does not escape non-Expression boo1234653. Tenable has extracted the preceding description block directly fro...
OPENSUSE-SU-2024:0412-1 Security update for python-python-sql
This update for python-python-sql fixes the following issues: - CVE-2024-9774: Fixed that unary operators does not escape non-Expression boo1234653...
