Vulnerabilities for ormar

First version without a known vulnerability: 0.23.1

Details

• GHSA-f964-whrq-44h82026-03-19

  ormar Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor

  Fixed in: 0.23.1

• GHSA-xxh2-68g9-8jqr2026-02-23

  ormar is vulnerable to SQL Injection through aggregate functions min() and max()

  Fixed in: 0.23.0