CVE-2019-7164
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
Published: 2019-02-20 · CVSS: Unscored
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7