https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T06:22:12.659019+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2019-7164 CVE-2019-7164 2026-09-29T06:22:12.663735+00:00

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.

 https://vulnerability.circl.lu/vuln/ghsa-887w-45rq-vxgf GHSA-887w-45rq-vxgf — SQLAlchemy vulnerable to SQL Injection via order_by parameter 2026-09-29T06:22:12.663870+00:00

Affected: PyPI: SQLAlchemy

SQLAlchemy before 1.3.0b3 allows SQL Injection via the order_by parameter. The fix (commit 30307c4) was applied only to the main branch and was never backported to the 1.2.x release line; all 1.2.x versions remain vulnerable.

 https://vulnerability.circl.lu/vuln/pysec-2019-123 PYSEC-2019-123 2026-09-29T06:22:12.663924+00:00

Affected: PyPI: sqlalchemy

SQLAlchemy before 1.3.0b3 allows SQL Injection via the order_by parameter. The fix (commit 30307c4) was applied only to the main branch and was never backported to the 1.2.x release line; all 1.2.x versions remain vulnerable.