{"action":"Upgrade sqlalchemy to 0.7.0b4 or later.","affected":[{"fixed":"0.7.0b4","introduced":"0"}],"component":"sqlalchemy","cve_ids":["CVE-2012-0805"],"ecosystem":"PyPI","epss":0.02853,"exploited":false,"fixed_versions":["0.7.0b4"],"ghsa_id":"GHSA-hfg2-wf6j-x53p","id":"tcs_01M5KFKH3MWEY1B4NE3N74R4FN","modified_at":"2024-10-28T15:04:29.386399Z","published_at":"2022-05-14T03:49:27Z","references":["https://osv.dev/vulnerability/GHSA-hfg2-wf6j-x53p","https://nvd.nist.gov/vuln/detail/CVE-2012-0805","https://github.com/sqlalchemy/sqlalchemy/commit/51fea2e159ca93daa0bc8066a5c35d8436d99418","https://bugs.launchpad.net/keystone/+bug/918608","https://exchange.xforce.ibmcloud.com/vulnerabilities/73756","https://github.com/pypa/advisory-database/tree/main/vulns/sqlalchemy/PYSEC-2012-9.yaml","https://github.com/sqlalchemy/sqlalchemy","https://web.archive.org/web/20140721183117/http://secunia.com/advisories/48771","https://web.archive.org/web/20140802043526/http://secunia.com/advisories/48328","https://web.archive.org/web/20140802044957/http://secunia.com/advisories/48327","http://rhn.redhat.com/errata/RHSA-2012-0369.html","http://www.debian.org/security/2012/dsa-2449","http://www.sqlalchemy.org/changelog/CHANGES_0_7_0","http://www.sqlalchemy.org/trac/changeset/852b6a1a87e7"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-hfg2-wf6j-x53p","url":"https://osv.dev/vulnerability/GHSA-hfg2-wf6j-x53p"}],"summary":"SQLAlchemy vulnerable to SQL injection"}