CVE-2012-0805
Fixed in a distro release EPSS 3%
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.
Products: sqlalchemy
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | sqlalchemy | 0.7.0b4 |
| PyPI | sqlalchemy | 0.7.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | sqlalchemy | 0.6.7-1 |
| Debian 13 | sqlalchemy | 0.6.7-1 |
| Debian 14 | sqlalchemy | 0.6.7-1 |
| Debian 6.0 | sqlalchemy | 0.6.3-3+squeeze1 |
| Red Hat Enterprise Linux 6 | python-sqlalchemy | 0:0.5.5-3.el6_2 |