Sqlalchemy vulnerabilities

Products

• Mako 4
• Sqlalchemy 3

Newest

• sqlalchemy mako Mako: Path traversal via drive-letter URI on Windows in TemplateLookup CVE-2026-102991 Fix available 6.5 MediumSeptember 30, 2026
• sqlalchemy mako Mako: Path traversal via backslash URI on Windows in TemplateLookup CVE-2026-44307 Fix available 8.7 HighMay 6, 2026
• sqlalchemy mako Mako: Path traversal via double-slash URI prefix in TemplateLookup CVE-2026-41205 Fix available 7.7 HighApril 16, 2026
• sqlalchemy mako, debian linux +1 more mako is vulnerable to Regular Expression Denial of Service CVE-2022-40023 Fix available 7.5 HighSeptember 7, 2022
• sqlalchemy, debian linux, opensuse backports sle +6 more +8 more SQLAlchemy vulnerable to SQL Injection via order_by parameter CVE-2019-7164 Fix available 9.8 CriticalFebruary 20, 2019
• sqlalchemy, debian linux, opensuse backports sle +6 more +8 more SQLAlchemy is vulnerable to SQL Injection via group_by parameter CVE-2019-7548 Fix available 7.8 HighFebruary 6, 2019
• sqlalchemy SQLAlchemy vulnerable to SQL injection CVE-2012-0805 Fix available 7.5 HighApril 12, 2012