Security Advisory
CVE-2019-7164
9.8
CRITICAL
Vulnerability Description
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
Published Date
February 20, 2019
Official Source
NIST NVD Advisory