CVE-2019-7548

Published February 6th, 2019

View on NVD ↗

CVSS v3

7.8

HIGH

CVSS v2

6.8

MEDIUM

Affected

2

PROJECTS

Description

SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.

sqlalchemy/sqlalchemy

The Database Toolkit for Python

GitHub

11.9K

no-security/sqlalchemy_test

GitHub