ormar vulnerabilities (PyPI)

2 vulnerabilities.

• ormar PyPI ormar has a Pydantic Validation Bypass via Kwargs Injection in Model Constructor CVE-2026-27953 Fix available 7.1 HighMarch 19, 2026
• ormar PyPI ormar is vulnerable to SQL Injection through aggregate functions min() and max() CVE-2026-26198 Public exploitFix available 9.8 CriticalFebruary 23, 2026