sqlalchemy CVEs · High

Protected by Waratek 0 0.0% Rule in development 0 0.0% Mitigation candidate 0 0.0% No exploit published 0 0.0% Outside Waratek scope 0 0.0% Not applicable 2 100.0% Withdrawn CVE 0 0.0%

Critical 0 0.0% High 2 100.0% Medium 0 0.0% Low 0 0.0% None 0 0.0% Unknown 0 0.0%

blocked by ARMR today 0 0.0% partly blocked 0 0.0% not blocked 2 100.0% not established 0 0.0% unrecorded 0 0.0%

Exploited 0 0.0% Working exploit published 0 0.0% Proof of concept only 0 0.0% Forecast only 0 0.0% No public exploit 2 100.0%

split by StatusSeverityProtectionExploit maturity peak 1 / year

20121 Not applicable1 High1 not blocked1 No public exploit1 20130 20140 20150 20160 20170 20180 20191 Not applicable1 High1 not blocked1 No public exploit1

20122013201420152016201720182019

CVE	Severity	Published▾	Status	Exploitation	Description
CVE-2019-7548	High	2019-02-06	Not applicable	No public exploit	SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
CVE-2012-0805	High	2012-06-05	Not applicable	No public exploit	Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.

CVE

Severity

Published▾

Status

Exploitation

Description

CVE-2019-7548

High

2019-02-06

Not applicable

No public exploit

SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.

CVE-2012-0805

High

2012-06-05

Not applicable

No public exploit

Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.