tortoise/tortoise-orm
GitHub
Releases132
Frequency2 weeks 6 days
Last Release
Stars5.61K
Familiar asyncio ORM for python, built with relations in mind
CVE History
| CVE | Affected | Published | CVSS v3 | CVSS v2 |
|---|---|---|---|---|
| < 0.15.23, >= 0.16.0, < 0.16.6 | 6.3 MEDIUM | 6.5 MEDIUM | ||
In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, starts_with, or ends_with filters (and their case-insensitive counterparts). | ||||