VYPR
Critical severityOSV Advisory· Published Feb 20, 2019· Updated Aug 4, 2024

CVE-2019-7164

CVE-2019-7164

Description

SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
SQLAlchemyPyPI
< 1.3.0b31.3.0b3

Affected products

155

Patches

Vulnerability mechanics

References

13

News mentions

0

No linked articles in our index yet.