https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 05:28:24 +0000 https://vulnerability.circl.lu/vuln/cve-2019-7164 <p>SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.</p> <p>SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.</p> https://vulnerability.circl.lu/vuln/cve-2019-7164 https://vulnerability.circl.lu/vuln/ghsa-887w-45rq-vxgf <p><strong>Affected:</strong> PyPI: SQLAlchemy</p> <p>SQLAlchemy before 1.3.0b3 allows SQL Injection via the order_by parameter. The fix (commit 30307c4) was applied only to the main branch and was never backported to the 1.2.x release line; all 1.2.x versions remain vulnerable.</p> <p><strong>Affected:</strong> PyPI: SQLAlchemy</p> <p>SQLAlchemy before 1.3.0b3 allows SQL Injection via the order_by parameter. The fix (commit 30307c4) was applied only to the main branch and was never backported to the 1.2.x release line; all 1.2.x versions remain vulnerable.</p> https://vulnerability.circl.lu/vuln/ghsa-887w-45rq-vxgf https://vulnerability.circl.lu/vuln/pysec-2019-123 <p><strong>Affected:</strong> PyPI: sqlalchemy</p> <p>SQLAlchemy before 1.3.0b3 allows SQL Injection via the order_by parameter. The fix (commit 30307c4) was applied only to the main branch and was never backported to the 1.2.x release line; all 1.2.x versions remain vulnerable.</p> <p><strong>Affected:</strong> PyPI: sqlalchemy</p> <p>SQLAlchemy before 1.3.0b3 allows SQL Injection via the order_by parameter. The fix (commit 30307c4) was applied only to the main branch and was never backported to the 1.2.x release line; all 1.2.x versions remain vulnerable.</p> https://vulnerability.circl.lu/vuln/pysec-2019-123