SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade python2-pyyamlUpgrade python2-pluggyUpgrade python2-idnaUpgrade python2-chardetUpgrade python2-psycopg2Upgrade python2-pyUpgrade python-psycopg2-docUpgrade python3-docsUpgrade python2-coverageUpgrade python2-rpm-macrosUpgrade python2-pytest-mockUpgrade python2-PyMySQLUpgrade python2-psycopg2-debugUpgrade python2-setuptools_scmUpgrade python2-pysocksUpgrade python2-pytzUpgrade python2-docutilsUpgrade python2-attrsUpgrade python2-psycopg2-testsUpgrade python2-mockUpgrade python3-docutilsUpgrade python2-CythonUpgrade python2-markupsafeUpgrade python2-funcsigsUpgrade python2-pytestUpgrade python2-ipaddress | May 13, 2022 | Feb 6, 2019 |
| Centos_linux | — | Upgrade python2-pyyamlUpgrade python-nose-docsUpgrade python2-tkinterUpgrade python2-lxmlUpgrade python2-numpyUpgrade python2-pytest-mockUpgrade python2-scipy-debuginfoUpgrade python2-PyMySQLUpgrade python2-noseUpgrade python-sqlalchemy-docUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-chardetUpgrade python36-rpm-macrosUpgrade python2-develUpgrade python2-pyyaml-debuginfoUpgrade python2-toolsUpgrade python2-sqlalchemyUpgrade python2-libsUpgrade python2-numpy-docUpgrade python2-pluggyUpgrade python36Upgrade python2-docutilsUpgrade python2-bson-debuginfoUpgrade python2-babelUpgrade python2-idnaUpgrade python2-pyUpgrade python2-backportsUpgrade python3-scipy-debuginfoUpgrade python2-pymongo-debuginfoUpgrade python2-scipyUpgrade python2-numpy-debuginfoUpgrade python3-pygmentsUpgrade python3-pymongoUpgrade python-pymongo-docUpgrade python3-PyMySQLUpgrade python2-coverage-debuginfoUpgrade python2-pytzUpgrade python3-bsonUpgrade python2-setuptools_scmUpgrade python3-virtualenvUpgrade python3-sqlalchemyUpgrade python2-jinja2Upgrade python2-docs-infoUpgrade python2-urllib3Upgrade python2-CythonUpgrade python2-pymongoUpgrade python2-setuptoolsUpgrade python3-bson-debuginfoUpgrade python2-dnsUpgrade python2-lxml-debuginfoUpgrade python3-docutilsUpgrade python2-psycopg2-debuginfoUpgrade python2-debugUpgrade python3-scipyUpgrade python2-requestsUpgrade python36-develUpgrade babelUpgrade python36-debugUpgrade python2-pymongo-gridfsUpgrade python2-Cython-debuginfoUpgrade python2-docsUpgrade python2-psycopg2-testsUpgrade python2-ipaddressUpgrade python2-funcsigsUpgrade python2-pysocksUpgrade python2-psycopg2Upgrade python2-psycopg2-debugUpgrade python2-pipUpgrade python2-rpm-macrosUpgrade python2-sixUpgrade python3-pymongo-debuginfoUpgrade python2-markupsafeUpgrade python2-virtualenvUpgrade python3-docsUpgrade python2-attrsUpgrade python2-debuginfoUpgrade python2-wheelUpgrade python3-noseUpgrade python2-debugsourceUpgrade python2-testUpgrade python2-coverageUpgrade python2-bsonUpgrade python3-wheelUpgrade python2Upgrade python2-pytestUpgrade python-virtualenv-docUpgrade python3-pymongo-gridfsUpgrade python2-numpy-f2pyUpgrade python2-mockUpgrade python2-pygmentsUpgrade python2-backports-ssl_match_hostnameUpgrade python-psycopg2-doc | Aug 28, 2019 | Feb 6, 2019 |
| Debian | — | Upgrade sqlalchemy | Mar 19, 2019 | Feb 6, 2019 |
| Freebsd | — | Upgrade py39-sqlalchemy12Upgrade py39-sqlalchemy10Upgrade py39-sqlalchemy11 | Apr 14, 2023 | Apr 9, 2023 |
| Huawei Euleros 2_0_sp2 | — | Upgrade python-sqlalchemy | Nov 3, 2020 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp3 | — | Upgrade python-sqlalchemy | Sep 28, 2020 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp5 | — | Upgrade python-sqlalchemy | Nov 2, 2020 | Feb 6, 2019 |
| Huawei Euleros 2_0_sp8 | — | Upgrade python3-sqlalchemyUpgrade python2-sqlalchemyUpgrade python-sqlalchemy | Dec 15, 2020 | Feb 6, 2019 |
| Oracle Solaris | — | Upgrade library/python/sqlalchemy to version 1.2.19-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/python/sqlalchemy-35 to version 1.2.19-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/python/sqlalchemy-34 to version 1.2.19-11.4.16.0.1.3.0 on Solaris 11.4Upgrade library/python/sqlalchemy-27 to version 1.2.19-11.4.16.0.1.3.0 on Solaris 11.4 | Dec 18, 2019 | Feb 6, 2019 |
| Oracle_linux | — | Upgrade python2-pysocksUpgrade python36-rpm-macrosUpgrade python3-noseUpgrade python2-pipUpgrade python2Upgrade python3-pymongoUpgrade python2-ipaddressUpgrade python36-debugUpgrade python2-pymongo-gridfsUpgrade python2-scipyUpgrade python2-backportsUpgrade python2-pytzUpgrade python2-attrsUpgrade python2-docs-infoUpgrade python2-CythonUpgrade python2-docutilsUpgrade python-virtualenv-docUpgrade python2-bsonUpgrade python2-toolsUpgrade python2-jinja2Upgrade python2-dnsUpgrade python2-libsUpgrade python2-psycopg2-debugUpgrade python36-develUpgrade python2-testUpgrade python36Upgrade python3-virtualenvUpgrade python2-numpy-f2pyUpgrade python2-numpyUpgrade babelUpgrade python-nose-docsUpgrade python2-pytest-mockUpgrade python3-PyMySQLUpgrade python2-pyUpgrade python2-wheelUpgrade python2-develUpgrade python2-pytestUpgrade python2-PyMySQLUpgrade python2-sixUpgrade python2-pluggyUpgrade python2-backports-ssl_match_hostnameUpgrade python2-debugUpgrade python3-wheelUpgrade python2-pymongoUpgrade python-sqlalchemy-docUpgrade python-psycopg2-docUpgrade python2-pygmentsUpgrade python2-idnaUpgrade python2-babelUpgrade python3-pygmentsUpgrade python2-virtualenvUpgrade python2-pyyamlUpgrade python2-chardetUpgrade python2-docsUpgrade python2-mockUpgrade python2-coverageUpgrade python3-bsonUpgrade python2-funcsigsUpgrade python2-tkinterUpgrade python2-requestsUpgrade python2-psycopg2Upgrade python-pymongo-docUpgrade python3-docutilsUpgrade python2-sqlalchemyUpgrade python2-numpy-docUpgrade python2-urllib3Upgrade python3-pymongo-gridfsUpgrade python2-noseUpgrade python2-markupsafeUpgrade python2-rpm-macrosUpgrade python3-scipyUpgrade python3-docsUpgrade python2-psycopg2-testsUpgrade python2-lxmlUpgrade python2-setuptoolsUpgrade python3-sqlalchemyUpgrade python2-setuptools_scm | Jul 22, 2024 | Feb 1, 2019 |
| Redhat_linux | — | Upgrade python2-jinja2Upgrade python3-pymongoUpgrade python2-requestsUpgrade python2-virtualenvUpgrade python2-debuginfoUpgrade python2-pysocksUpgrade python2-rpm-macrosUpgrade python3-pymongo-debuginfoUpgrade python2-dnsUpgrade python2-psycopg2-debugUpgrade python2-lxmlUpgrade python2-markupsafeUpgrade python3-bson-debuginfoUpgrade python2-setuptoolsUpgrade python2Upgrade python3-wheelUpgrade python2-coverage-debuginfoUpgrade python3-docsUpgrade python2-attrsUpgrade python2-pytzUpgrade python2-setuptools_scmUpgrade python2-pygmentsUpgrade python36-develUpgrade python2-urllib3Upgrade python-pymongo-docUpgrade python3-pygmentsUpgrade python2-pluggyUpgrade python2-tkinterUpgrade python2-pyyaml-debuginfoUpgrade python-sqlalchemy-docNo solution existsUpgrade python2-testUpgrade python2-sqlalchemyUpgrade python3-sqlalchemyUpgrade python3-scipy-debuginfoUpgrade python2-pytestUpgrade python-psycopg2-docUpgrade python2-psycopg2-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-backportsUpgrade python2-bsonUpgrade python2-pymongo-gridfsUpgrade python2-backports-ssl_match_hostnameUpgrade python2-numpy-docUpgrade python2-scipy-debuginfoUpgrade python2-pymongoUpgrade python2-mockUpgrade python2-funcsigsUpgrade python3-virtualenvUpgrade python3-bsonUpgrade python36-debugUpgrade python2-libsUpgrade python-virtualenv-docUpgrade python2-pipUpgrade python3-pymongo-gridfsUpgrade python2-chardetUpgrade python2-bson-debuginfoUpgrade python2-lxml-debuginfoUpgrade python2-numpy-f2pyUpgrade python2-pytest-mockUpgrade python2-idnaUpgrade python2-sixUpgrade python2-pyUpgrade python2-pyyamlUpgrade python2-numpy-debuginfoUpgrade python2-PyMySQLUpgrade python3-docutilsUpgrade python2-psycopg2Upgrade python3-PyMySQLUpgrade python2-psycopg2-debug-debuginfoUpgrade python2-coverageUpgrade python2-pymongo-debuginfoUpgrade python2-numpyUpgrade python36Upgrade python2-docutilsUpgrade babelUpgrade python36-rpm-macrosUpgrade python2-noseUpgrade python2-docsUpgrade python2-debugUpgrade python-nose-docsUpgrade python2-CythonUpgrade python2-debugsourceUpgrade python2-babelUpgrade python2-ipaddressUpgrade python3-scipyUpgrade python2-develUpgrade python2-docs-infoUpgrade python3-noseUpgrade python2-Cython-debuginfoUpgrade python2-toolsUpgrade python2-wheelUpgrade python2-scipy | May 8, 2019 | Feb 6, 2019 |
| Rocky_linux | — | Upgrade python36-develUpgrade python2-coverageUpgrade python36-debugUpgrade python2-psycopg2-debuginfoUpgrade python2-psycopg2-testsUpgrade python2-psycopg2-debugUpgrade python-psycopg2-docUpgrade python2-psycopg2Upgrade python2-markupsafeUpgrade python2-pyyamlUpgrade python2-Cython-debuginfoUpgrade python2-pyyaml-debuginfoUpgrade python2-coverage-debuginfoUpgrade python2-CythonUpgrade python36Upgrade python2-psycopg2-debug-debuginfo | Mar 12, 2024 | Feb 6, 2019 |
| Suse | — | Upgrade python-SQLAlchemy-docUpgrade python2-SQLAlchemyUpgrade python3-SQLAlchemy | Sep 3, 2019 | Feb 6, 2019 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Feb 6, 2019 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub