VulnerableCode Package Details - pkg:pypi/sqlalchemy@0.9.5

Staging Environment: Content and features may be unstable or change without notice.

Search for packages

Package details: pkg:pypi/sqlalchemy@0.9.5

Essentials
History (8)

purl	pkg:pypi/sqlalchemy@0.9.5

Next non-vulnerable version	1.3.0b3
Latest non-vulnerable version	1.3.0b3
Risk	4.5

Vulnerabilities affecting this package (4)

Vulnerability	Summary	Fixed by
VCID-5rtv-m2nm-hudr Aliases: PYSEC-2019-54	SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.	1.2.18 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}
VCID-naz3-21uh-ayds Aliases: CVE-2019-7548 GHSA-38fc-9xqv-7f7q PYSEC-2019-124		1.2.18 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 1.2.19 Affected by 1 other vulnerability. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }}
VCID-pgpq-7tfk-87h9 Aliases: CVE-2019-7164 GHSA-887w-45rq-vxgf PYSEC-2019-123		1.3.0b3 Affected by 0 other vulnerabilities.
VCID-xn42-4e5p-8bd3 Aliases: PYSEC-2019-53	SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.	1.2.18 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2026-06-12T17:10:13.835071+00:00	GitLab Importer	Affected by	VCID-pgpq-7tfk-87h9	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/sqlalchemy/CVE-2019-7164.yml	38.6.0
2026-06-12T17:10:12.708504+00:00	GitLab Importer	Affected by	VCID-naz3-21uh-ayds	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/sqlalchemy/CVE-2019-7548.yml	38.6.0
2026-06-12T04:02:39.422414+00:00	Pypa Importer	Affected by	VCID-pgpq-7tfk-87h9	https://github.com/pypa/advisory-database/blob/main/vulns/sqlalchemy/PYSEC-2019-123.yaml	38.6.0
2026-06-12T04:02:38.329305+00:00	Pypa Importer	Affected by	VCID-naz3-21uh-ayds	https://github.com/pypa/advisory-database/blob/main/vulns/sqlalchemy/PYSEC-2019-124.yaml	38.6.0
2026-06-11T20:44:16.262105+00:00	PyPI Importer	Affected by	VCID-pgpq-7tfk-87h9	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0
2026-06-11T20:44:15.570366+00:00	PyPI Importer	Affected by	VCID-xn42-4e5p-8bd3	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0
2026-06-11T20:44:14.024857+00:00	PyPI Importer	Affected by	VCID-5rtv-m2nm-hudr	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0
2026-06-11T20:44:13.266035+00:00	PyPI Importer	Affected by	VCID-naz3-21uh-ayds	https://osv-vulnerabilities.storage.googleapis.com/PyPI/all.zip	38.6.0