PyPI/sqlalchemy CVE-2012-0805: critical 9.8, EPSS 2.85%
SQLAlchemy vulnerable to SQL injection
Action: Upgrade sqlalchemy to 0.7.0b4 or later.
pip install sqlalchemy==0.7.0b4Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.7.0b4 | - |
Fixed versions
| 0.7.0b4 |
Sources
- osv: GHSA-hfg2-wf6j-x53p
- https://nvd.nist.gov/vuln/detail/CVE-2012-0805
- https://github.com/sqlalchemy/sqlalchemy/commit/51fea2e159ca93daa0bc8066a5c35d8436d99418
- https://bugs.launchpad.net/keystone/+bug/918608
- https://exchange.xforce.ibmcloud.com/vulnerabilities/73756
- https://github.com/pypa/advisory-database/tree/main/vulns/sqlalchemy/PYSEC-2012-9.yaml
- https://github.com/sqlalchemy/sqlalchemy
- https://web.archive.org/web/20140721183117/http://secunia.com/advisories/48771
- https://web.archive.org/web/20140802043526/http://secunia.com/advisories/48328
- https://web.archive.org/web/20140802044957/http://secunia.com/advisories/48327
- http://rhn.redhat.com/errata/RHSA-2012-0369.html
- http://www.debian.org/security/2012/dsa-2449
- http://www.sqlalchemy.org/changelog/CHANGES_0_7_0
- http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7
CVE-2012-0805 · published · modified · JSON