Skip to content

Product

pypi tortoise-orm vulnerabilities

1 published CVE affecting pypi tortoise-orm, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
1
Medium
0
Low
0
Unscored
0
CISA KEV
0

Latest pypi tortoise-orm CVEs

Newest publication first

  1. CVE-2020-11010 SQL injection in Tortoise ORM

    Published
    HighCVSS 8.8 EPSS 1.1%

    In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, starts_with, or ends_with filters (and th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.