Search for packages
| purl | pkg:pypi/sqlalchemy@1.3.0b3 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-tt22-7cuc-gkfc | SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter. |
CVE-2019-7164
GHSA-887w-45rq-vxgf PYSEC-2019-123 |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-02T04:39:07.533747+00:00 | GitLab Importer | Fixing | VCID-tt22-7cuc-gkfc | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/pypi/sqlalchemy/CVE-2019-7164.yml | 38.6.0 |