SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.
CVSS Details
- CVSS 3.1 Base Score: 7.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-python-psycopg2-docalma-upgrade-python2-attrsalma-upgrade-python2-chardetalma-upgrade-python2-coveragealma-upgrade-python2-cythonalma-upgrade-python2-docutilsalma-upgrade-python2-funcsigsalma-upgrade-python2-idnaalma-upgrade-python2-ipaddressalma-upgrade-python2-markupsafealma-upgrade-python2-mockalma-upgrade-python2-pluggyalma-upgrade-python2-psycopg2alma-upgrade-python2-psycopg2-debugalma-upgrade-python2-psycopg2-testsalma-upgrade-python2-pyalma-upgrade-python2-pymysqlalma-upgrade-python2-pysocksalma-upgrade-python2-pytestalma-upgrade-python2-pytest-mockalma-upgrade-python2-pytzalma-upgrade-python2-pyyamlalma-upgrade-python2-rpm-macrosalma-upgrade-python2-setuptools_scmalma-upgrade-python3-docsalma-upgrade-python3-docutils | May 13, 2022 | Feb 6, 2019 | |
| Centos_linux | — | centos-upgrade-babelcentos-upgrade-python-nose-docscentos-upgrade-python-psycopg2-doccentos-upgrade-python-pymongo-doccentos-upgrade-python-sqlalchemy-doccentos-upgrade-python-virtualenv-doccentos-upgrade-python2centos-upgrade-python2-attrscentos-upgrade-python2-babelcentos-upgrade-python2-backportscentos-upgrade-python2-backports-ssl_match_hostnamecentos-upgrade-python2-bsoncentos-upgrade-python2-bson-debuginfocentos-upgrade-python2-chardetcentos-upgrade-python2-coveragecentos-upgrade-python2-coverage-debuginfocentos-upgrade-python2-cythoncentos-upgrade-python2-cython-debuginfocentos-upgrade-python2-debugcentos-upgrade-python2-debuginfocentos-upgrade-python2-debugsourcecentos-upgrade-python2-develcentos-upgrade-python2-dnscentos-upgrade-python2-docscentos-upgrade-python2-docs-infocentos-upgrade-python2-docutilscentos-upgrade-python2-funcsigscentos-upgrade-python2-idnacentos-upgrade-python2-ipaddresscentos-upgrade-python2-jinja2centos-upgrade-python2-libscentos-upgrade-python2-lxmlcentos-upgrade-python2-lxml-debuginfocentos-upgrade-python2-markupsafecentos-upgrade-python2-mockcentos-upgrade-python2-nosecentos-upgrade-python2-numpycentos-upgrade-python2-numpy-debuginfocentos-upgrade-python2-numpy-doccentos-upgrade-python2-numpy-f2pycentos-upgrade-python2-pipcentos-upgrade-python2-pluggycentos-upgrade-python2-psycopg2centos-upgrade-python2-psycopg2-debugcentos-upgrade-python2-psycopg2-debug-debuginfocentos-upgrade-python2-psycopg2-debuginfocentos-upgrade-python2-psycopg2-testscentos-upgrade-python2-pycentos-upgrade-python2-pygmentscentos-upgrade-python2-pymongocentos-upgrade-python2-pymongo-debuginfocentos-upgrade-python2-pymongo-gridfscentos-upgrade-python2-pymysqlcentos-upgrade-python2-pysockscentos-upgrade-python2-pytestcentos-upgrade-python2-pytest-mockcentos-upgrade-python2-pytzcentos-upgrade-python2-pyyamlcentos-upgrade-python2-pyyaml-debuginfocentos-upgrade-python2-requestscentos-upgrade-python2-rpm-macroscentos-upgrade-python2-scipycentos-upgrade-python2-scipy-debuginfocentos-upgrade-python2-setuptoolscentos-upgrade-python2-setuptools_scmcentos-upgrade-python2-sixcentos-upgrade-python2-sqlalchemycentos-upgrade-python2-testcentos-upgrade-python2-tkintercentos-upgrade-python2-toolscentos-upgrade-python2-urllib3centos-upgrade-python2-virtualenvcentos-upgrade-python2-wheelcentos-upgrade-python3-bsoncentos-upgrade-python3-bson-debuginfocentos-upgrade-python3-docscentos-upgrade-python3-docutilscentos-upgrade-python3-nosecentos-upgrade-python3-pygmentscentos-upgrade-python3-pymongocentos-upgrade-python3-pymongo-debuginfocentos-upgrade-python3-pymongo-gridfscentos-upgrade-python3-pymysqlcentos-upgrade-python3-scipycentos-upgrade-python3-scipy-debuginfocentos-upgrade-python3-sqlalchemycentos-upgrade-python3-virtualenvcentos-upgrade-python3-wheelcentos-upgrade-python36centos-upgrade-python36-debugcentos-upgrade-python36-develcentos-upgrade-python36-rpm-macros | Aug 28, 2019 | Feb 6, 2019 |
| Debian | debian-upgrade-sqlalchemy | Mar 19, 2019 | Feb 6, 2019 | |
| Freebsd | freebsd-upgrade-package-py39-sqlalchemy12freebsd-upgrade-package-py39-sqlalchemy11freebsd-upgrade-package-py39-sqlalchemy10 | Apr 14, 2023 | Apr 9, 2023 | |
| Huawei Euleros 2_0_sp2 | huawei-euleros-2_0_sp2-upgrade-python-sqlalchemy | Nov 3, 2020 | Feb 6, 2019 | |
| Huawei Euleros 2_0_sp3 | huawei-euleros-2_0_sp3-upgrade-python-sqlalchemy | Sep 28, 2020 | Feb 6, 2019 | |
| Huawei Euleros 2_0_sp5 | huawei-euleros-2_0_sp5-upgrade-python-sqlalchemy | Nov 2, 2020 | Feb 6, 2019 | |
| Huawei Euleros 2_0_sp8 | huawei-euleros-2_0_sp8-upgrade-python-sqlalchemyhuawei-euleros-2_0_sp8-upgrade-python2-sqlalchemyhuawei-euleros-2_0_sp8-upgrade-python3-sqlalchemy | Dec 15, 2020 | Feb 6, 2019 | |
| Oracle Solaris | oracle-solaris-11-4-upgrade-library-python-sqlalchemy-1-2-19-11-4-16-0-1-3-0oracle-solaris-11-4-upgrade-library-python-sqlalchemy-27-1-2-19-11-4-16-0-1-3-0oracle-solaris-11-4-upgrade-library-python-sqlalchemy-34-1-2-19-11-4-16-0-1-3-0oracle-solaris-11-4-upgrade-library-python-sqlalchemy-35-1-2-19-11-4-16-0-1-3-0 | Dec 18, 2019 | Feb 6, 2019 | |
| Oracle_linux | — | oracle-linux-upgrade-babeloracle-linux-upgrade-python2oracle-linux-upgrade-python2-attrsoracle-linux-upgrade-python2-babeloracle-linux-upgrade-python2-backportsoracle-linux-upgrade-python2-backports-ssl-match-hostnameoracle-linux-upgrade-python2-bsonoracle-linux-upgrade-python2-chardetoracle-linux-upgrade-python2-coverageoracle-linux-upgrade-python2-cythonoracle-linux-upgrade-python2-debugoracle-linux-upgrade-python2-develoracle-linux-upgrade-python2-dnsoracle-linux-upgrade-python2-docsoracle-linux-upgrade-python2-docs-infooracle-linux-upgrade-python2-docutilsoracle-linux-upgrade-python2-funcsigsoracle-linux-upgrade-python2-idnaoracle-linux-upgrade-python2-ipaddressoracle-linux-upgrade-python2-jinja2oracle-linux-upgrade-python2-libsoracle-linux-upgrade-python2-lxmloracle-linux-upgrade-python2-markupsafeoracle-linux-upgrade-python2-mockoracle-linux-upgrade-python2-noseoracle-linux-upgrade-python2-numpyoracle-linux-upgrade-python2-numpy-docoracle-linux-upgrade-python2-numpy-f2pyoracle-linux-upgrade-python2-piporacle-linux-upgrade-python2-pluggyoracle-linux-upgrade-python2-psycopg2oracle-linux-upgrade-python2-psycopg2-debugoracle-linux-upgrade-python2-psycopg2-testsoracle-linux-upgrade-python2-pyoracle-linux-upgrade-python2-pygmentsoracle-linux-upgrade-python2-pymongooracle-linux-upgrade-python2-pymongo-gridfsoracle-linux-upgrade-python2-pymysqloracle-linux-upgrade-python2-pysocksoracle-linux-upgrade-python2-pytestoracle-linux-upgrade-python2-pytest-mockoracle-linux-upgrade-python2-pytzoracle-linux-upgrade-python2-pyyamloracle-linux-upgrade-python2-requestsoracle-linux-upgrade-python2-rpm-macrosoracle-linux-upgrade-python2-scipyoracle-linux-upgrade-python2-setuptoolsoracle-linux-upgrade-python2-setuptools-scmoracle-linux-upgrade-python2-sixoracle-linux-upgrade-python2-sqlalchemyoracle-linux-upgrade-python2-testoracle-linux-upgrade-python2-tkinteroracle-linux-upgrade-python2-toolsoracle-linux-upgrade-python2-urllib3oracle-linux-upgrade-python2-virtualenvoracle-linux-upgrade-python2-wheeloracle-linux-upgrade-python36oracle-linux-upgrade-python36-debugoracle-linux-upgrade-python36-develoracle-linux-upgrade-python36-rpm-macrosoracle-linux-upgrade-python3-bsonoracle-linux-upgrade-python3-docsoracle-linux-upgrade-python3-docutilsoracle-linux-upgrade-python3-noseoracle-linux-upgrade-python3-pygmentsoracle-linux-upgrade-python3-pymongooracle-linux-upgrade-python3-pymongo-gridfsoracle-linux-upgrade-python3-pymysqloracle-linux-upgrade-python3-scipyoracle-linux-upgrade-python3-sqlalchemyoracle-linux-upgrade-python3-virtualenvoracle-linux-upgrade-python3-wheeloracle-linux-upgrade-python-nose-docsoracle-linux-upgrade-python-psycopg2-docoracle-linux-upgrade-python-pymongo-docoracle-linux-upgrade-python-sqlalchemy-docoracle-linux-upgrade-python-virtualenv-doc | Jul 22, 2024 | Feb 1, 2019 |
| Redhat_linux | redhat-upgrade-babelredhat-upgrade-python-nose-docsredhat-upgrade-python-psycopg2-docredhat-upgrade-python-pymongo-docredhat-upgrade-python-sqlalchemy-docredhat-upgrade-python-virtualenv-docredhat-upgrade-python2redhat-upgrade-python2-attrsredhat-upgrade-python2-babelredhat-upgrade-python2-backportsredhat-upgrade-python2-backports-ssl_match_hostnameredhat-upgrade-python2-bsonredhat-upgrade-python2-bson-debuginforedhat-upgrade-python2-chardetredhat-upgrade-python2-coverageredhat-upgrade-python2-coverage-debuginforedhat-upgrade-python2-cythonredhat-upgrade-python2-cython-debuginforedhat-upgrade-python2-debugredhat-upgrade-python2-debuginforedhat-upgrade-python2-debugsourceredhat-upgrade-python2-develredhat-upgrade-python2-dnsredhat-upgrade-python2-docsredhat-upgrade-python2-docs-inforedhat-upgrade-python2-docutilsredhat-upgrade-python2-funcsigsredhat-upgrade-python2-idnaredhat-upgrade-python2-ipaddressredhat-upgrade-python2-jinja2redhat-upgrade-python2-libsredhat-upgrade-python2-lxmlredhat-upgrade-python2-lxml-debuginforedhat-upgrade-python2-markupsaferedhat-upgrade-python2-mockredhat-upgrade-python2-noseredhat-upgrade-python2-numpyredhat-upgrade-python2-numpy-debuginforedhat-upgrade-python2-numpy-docredhat-upgrade-python2-numpy-f2pyredhat-upgrade-python2-pipredhat-upgrade-python2-pluggyredhat-upgrade-python2-psycopg2redhat-upgrade-python2-psycopg2-debugredhat-upgrade-python2-psycopg2-debug-debuginforedhat-upgrade-python2-psycopg2-debuginforedhat-upgrade-python2-psycopg2-testsredhat-upgrade-python2-pyredhat-upgrade-python2-pygmentsredhat-upgrade-python2-pymongoredhat-upgrade-python2-pymongo-debuginforedhat-upgrade-python2-pymongo-gridfsredhat-upgrade-python2-pymysqlredhat-upgrade-python2-pysocksredhat-upgrade-python2-pytestredhat-upgrade-python2-pytest-mockredhat-upgrade-python2-pytzredhat-upgrade-python2-pyyamlredhat-upgrade-python2-pyyaml-debuginforedhat-upgrade-python2-requestsredhat-upgrade-python2-rpm-macrosredhat-upgrade-python2-scipyredhat-upgrade-python2-scipy-debuginforedhat-upgrade-python2-setuptoolsredhat-upgrade-python2-setuptools_scmredhat-upgrade-python2-sixredhat-upgrade-python2-sqlalchemyredhat-upgrade-python2-testredhat-upgrade-python2-tkinterredhat-upgrade-python2-toolsredhat-upgrade-python2-urllib3redhat-upgrade-python2-virtualenvredhat-upgrade-python2-wheelredhat-upgrade-python3-bsonredhat-upgrade-python3-bson-debuginforedhat-upgrade-python3-docsredhat-upgrade-python3-docutilsredhat-upgrade-python3-noseredhat-upgrade-python3-pygmentsredhat-upgrade-python3-pymongoredhat-upgrade-python3-pymongo-debuginforedhat-upgrade-python3-pymongo-gridfsredhat-upgrade-python3-pymysqlredhat-upgrade-python3-scipyredhat-upgrade-python3-scipy-debuginforedhat-upgrade-python3-sqlalchemyredhat-upgrade-python3-virtualenvredhat-upgrade-python3-wheelredhat-upgrade-python36redhat-upgrade-python36-debugredhat-upgrade-python36-develredhat-upgrade-python36-rpm-macros | May 8, 2019 | Feb 6, 2019 | |
| Rocky_linux | rocky-upgrade-python-psycopg2-docrocky-upgrade-python2-coveragerocky-upgrade-python2-coverage-debuginforocky-upgrade-python2-cythonrocky-upgrade-python2-cython-debuginforocky-upgrade-python2-markupsaferocky-upgrade-python2-psycopg2rocky-upgrade-python2-psycopg2-debugrocky-upgrade-python2-psycopg2-debug-debuginforocky-upgrade-python2-psycopg2-debuginforocky-upgrade-python2-psycopg2-testsrocky-upgrade-python2-pyyamlrocky-upgrade-python2-pyyaml-debuginforocky-upgrade-python36rocky-upgrade-python36-debugrocky-upgrade-python36-devel | Mar 12, 2024 | Feb 6, 2019 | |
| Suse | — | suse-upgrade-python-sqlalchemy-docsuse-upgrade-python2-sqlalchemysuse-upgrade-python3-sqlalchemy | Sep 3, 2019 | Feb 6, 2019 |
| Ubuntu | no-fix-ubuntu-package | Jun 26, 2025 | Feb 6, 2019 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub