Vulnerabilities for SQLAlchemy

First version without a known vulnerability: 1.3.0b3

Details

• GHSA-hfg2-wf6j-x53p2022-05-14

  SQLAlchemy vulnerable to SQL injection

  Fixed in: 0.7.0b4, 0.7.0

• GHSA-887w-45rq-vxgf2019-04-16

  SQLAlchemy vulnerable to SQL Injection via order_by parameter

  Fixed in: 1.3.0b3

• GHSA-38fc-9xqv-7f7q2019-04-16

  SQLAlchemy is vulnerable to SQL Injection via group_by parameter

  Fixed in: 1.2.19, 1.2.18