VulnerableCode Package Details - pkg:pypi/sqlalchemy@0.1.6

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/sqlalchemy@0.1.6

Essentials
History (11)

purl	pkg:pypi/sqlalchemy@0.1.6

Next non-vulnerable version	0.7.0b4
Latest non-vulnerable version	1.3.0b3
Risk	4.5

Vulnerabilities affecting this package (5)

Vulnerability	Summary	Fixed by
VCID-5rtv-m2nm-hudr Aliases: PYSEC-2019-54	SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.	1.2.18 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-87d1-v886-abhr Aliases: CVE-2012-0805 GHSA-hfg2-wf6j-x53p PYSEC-2012-9	An input sanitation flaw in SQLAlchemy allows remote attacker to conduct SQL injection.	0.7.0b4 Affected by 0 other vulnerabilities. 0.7.0 Affected by 4 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-naz3-21uh-ayds Aliases: CVE-2019-7548 GHSA-38fc-9xqv-7f7q PYSEC-2019-124		1.2.18 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.2.19 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-pgpq-7tfk-87h9 Aliases: CVE-2019-7164 GHSA-887w-45rq-vxgf PYSEC-2019-123		1.3.0b3 Affected by 0 other vulnerabilities.
VCID-xn42-4e5p-8bd3 Aliases: PYSEC-2019-53	SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.	1.2.18 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-12T18:12:47.247214+00:00	GitLab Importer	Affected by	VCID-87d1-v886-abhr	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/sqlalchemy/CVE-2012-0805.yml	38.6.0
2026-06-12T17:10:13.466384+00:00	GitLab Importer	Affected by	VCID-pgpq-7tfk-87h9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/sqlalchemy/CVE-2019-7164.yml	38.6.0
2026-06-12T17:10:12.323228+00:00	GitLab Importer	Affected by	VCID-naz3-21uh-ayds	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/sqlalchemy/CVE-2019-7548.yml	38.6.0
2026-06-12T04:02:39.091950+00:00	Pypa Importer	Affected by	VCID-pgpq-7tfk-87h9	https://github.com/pypa/advisory-database/blob/main/vulns/sqlalchemy/PYSEC-2019-123.yaml	38.6.0
2026-06-12T04:02:38.007341+00:00	Pypa Importer	Affected by	VCID-naz3-21uh-ayds	https://github.com/pypa/advisory-database/blob/main/vulns/sqlalchemy/PYSEC-2019-124.yaml	38.6.0
2026-06-12T04:00:34.816318+00:00	Pypa Importer	Affected by	VCID-87d1-v886-abhr	https://github.com/pypa/advisory-database/blob/main/vulns/sqlalchemy/PYSEC-2012-9.yaml	38.6.0
2026-06-11T20:44:15.914479+00:00	PyPI Importer	Affected by	VCID-pgpq-7tfk-87h9	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0
2026-06-11T20:44:15.182162+00:00	PyPI Importer	Affected by	VCID-xn42-4e5p-8bd3	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0
2026-06-11T20:44:13.675741+00:00	PyPI Importer	Affected by	VCID-5rtv-m2nm-hudr	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0
2026-06-11T20:44:12.899835+00:00	PyPI Importer	Affected by	VCID-naz3-21uh-ayds	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0
2026-06-11T20:41:56.083922+00:00	PyPI Importer	Affected by	VCID-87d1-v886-abhr	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0