Piccolo-orm vulnerabilities

Products

• Piccolo 2
• Piccolo Admin 2

Newest

• piccolo-orm piccolo admin Piccolo Admin: Privilege escalation - admin to superuser via session-token disclosure in GET /api/tables/sessions/. CVE-2026-55485 Fix available 8.8 HighAugust 28, 2026
• piccolo-orm piccolo admin Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page CVE-2024-30248 Fix available 7.7 HighApril 1, 2024
• piccolo-orm piccolo piccolo SQL Injection via named transaction savepoints CVE-2023-47128 Fix available 9.1 CriticalNovember 10, 2023
• piccolo-orm piccolo Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration CVE-2023-41885 Fix available 5.3 MediumSeptember 12, 2023