CVE-2026-54529
2 advisories.
PyPI/sqladmin CVE-2026-54529: medium 5.3
SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`
Action: Upgrade sqladmin to 0.27.1 or later.
pip install sqladmin==0.27.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.27.1 | - |
Fixed versions
| 0.27.1 |
Sources
- osv: GHSA-ccg5-9c8w-xh6v
- https://github.com/smithyhq/sqladmin/security/advisories/GHSA-ccg5-9c8w-xh6v
- https://github.com/smithyhq/sqladmin
- https://github.com/smithyhq/sqladmin/releases/tag/0.27.1
CVE-2026-54529 · published · modified · JSON
PyPI/sqladmin CVE-2026-54529: medium 5.3
SQLAdmin: Unvalidated sortBy parameter in `ModelView` bypasses `column_sortable_list`
Action: Upgrade sqladmin to 0.27.1 or later.
pip install sqladmin==0.27.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.27.1 | - |
Fixed versions
| 0.27.1 |
Sources
- osv: PYSEC-2026-3922
- https://github.com/smithyhq/sqladmin/security/advisories/GHSA-ccg5-9c8w-xh6v
- https://github.com/smithyhq/sqladmin
- https://github.com/smithyhq/sqladmin/releases/tag/0.27.1
- https://pypi.org/project/sqladmin
- https://github.com/advisories/GHSA-ccg5-9c8w-xh6v
- https://nvd.nist.gov/vuln/detail/CVE-2026-54529
CVE-2026-54529 · published · modified · JSON