Vulnerabilities matching "sqlalchemy" — 16 matching vulnerabilities

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed — no installation and no source-code access required.

Scan your app free →
Severity Vulnerability Package Ecosystem Disclosed Fixed version
8.3 high CVE-2026-15736: Snowflake SQLAlchemy SQL Injection and Local File Disclosure Vulnerabilities snowflake-sqlalchemy PyPI 10 Sep 2026 1.11.0
9.8 critical CVE-2024-24811: products-sqlalchemyda Unauthenticated Arbitrary SQL Query Execution Vulnerability products-sqlalchemyda PyPI 29 Jun 2026 2.2
9.8 critical CVE-2024-24811: products-sqlalchemyda - Unauthenticated Arbitrary SQL Query Execution products-sqlalchemyda PyPI 07 Feb 2024 2.2
Critical Malicious code in sqlalchemy-os (PyPI) sqlalchemy-os PyPI 20 May 2023 No fix published
Critical Malicious code in sqlalchemy-requests (PyPI) sqlalchemy-requests PyPI 20 May 2023 No fix published
Critical Malicious code in matplotlib-sqlalchemy (PyPI) matplotlib-sqlalchemy PyPI 20 May 2023 No fix published
Critical Malicious code in sqlalchemy-install (PyPI) sqlalchemy-install PyPI 20 May 2023 No fix published
Unrated CVE-2022-40023: SQLalchemy Mako Regular Expression Denial of Service mako PyPI 07 Sep 2022 925760291d6efec64fda6e9dd1fd9cfbd5be068c
9.8 critical CVE-2012-0805: SQLAlchemy SQL Injection Vulnerability sqlalchemy PyPI 14 May 2022 0.7.0b4
9.8 critical CVE-2019-7164: SQLAlchemy SQL Injection Vulnerability sqlalchemy PyPI 16 Apr 2019 1.3.0b3
7.8 critical CVE-2019-7548: SQL Injection in SQLAlchemy sqlalchemy PyPI 16 Apr 2019 1.2.19
Unrated CVE-2019-7164: SQL Injection in SQLAlchemy sqlalchemy PyPI 20 Feb 2019 1.2.18
Unrated CVE-2019-7164: SQL Injection in SQLAlchemy sqlalchemy PyPI 20 Feb 2019 1.2.18
Unrated CVE-2019-7548: SQL Injection in SQLAlchemy sqlalchemy PyPI 06 Feb 2019 1.2.18
Unrated CVE-2019-7548: SQL Injection in SQLAlchemy sqlalchemy PyPI 06 Feb 2019 1.2.18
Unrated CVE-2012-0805: SQL Injection Vulnerabilities in SQLAlchemy sqlalchemy PyPI 05 Jun 2012 0.7.0
Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

Searching the database

How do I search for a CVE or a package?

Type a CVE id, package name, ecosystem or keyword into the search field. Results include the severity, the affected package, the ecosystem, the disclosure date and the fixed version.

Can I filter by severity or by whether a fix exists?

Yes. The filters on the left narrow the list to critical, high, medium or low vulnerabilities, to a single ecosystem, and to vulnerabilities that have a fix available or none yet.

What does "No fix published" mean?

No patched version has been released for that vulnerability yet. The vulnerability page still shows the affected range and any workaround that can reduce exposure in the meantime.