CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 0 Last 7 days 2,628 Total CVEs 401,238 CISA KEV 1,733 Critical 42,400 All stats

Filters: Vendor: Sqlalchemy Clear all

Page 1

CVE-2026-102991 MEDIUM

Mako: Path traversal via drive-letter URI on Windows in TemplateLookup

CVSS 6.5 EPSS 0.36% Sep 30, 2026

CVE-2026-44307 HIGH

Mako: Path traversal via backslash URI on Windows in TemplateLookup

CVSS 8.7 EPSS 0.89% May 12, 2026

CVE-2026-41205 HIGH

Mako: Path traversal via double-slash URI prefix in TemplateLookup

CVSS 7.7 EPSS 0.53% Apr 23, 2026

CVE-2022-40023 HIGH

python-mako: REDoS in Lexer class

CVSS 8.7 EPSS 2.16% Sep 7, 2022

CVE-2019-7164 CRITICAL

python-sqlalchemy: SQL Injection when the order_by parameter can be controlled

CVSS 9.3 EPSS 3.52% Feb 20, 2019

CVE-2019-7548 CRITICAL

python-sqlalchemy: SQL Injection when the group_by parameter can be controlled

CVSS 9.3 EPSS 1.78% Feb 6, 2019

CVE-2012-0805 CRITICAL

python-sqlalchemy: SQL injection flaw due to not checking LIMIT input for correct type

CVSS 9.3 EPSS 2.89% Jun 5, 2012

CVE ID	Description	Severity	CVSS	EPSS	Ecosystems	Published
CVE-2026-102991	Mako: Path traversal via drive-letter URI on Windows in TemplateLookup	MEDIUM	6.5	0.36%		Sep 30, 2026
CVE-2026-44307	Mako: Path traversal via backslash URI on Windows in TemplateLookup	HIGH	8.7	0.89%		May 12, 2026
CVE-2026-41205	Mako: Path traversal via double-slash URI prefix in TemplateLookup	HIGH	7.7	0.53%		Apr 23, 2026
CVE-2022-40023	python-mako: REDoS in Lexer class	HIGH	8.7	2.16%		Sep 7, 2022
CVE-2019-7164	python-sqlalchemy: SQL Injection when the order_by parameter can be controlled	CRITICAL	9.3	3.52%		Feb 20, 2019
CVE-2019-7548	python-sqlalchemy: SQL Injection when the group_by parameter can be controlled	CRITICAL	9.3	1.78%		Feb 6, 2019
CVE-2012-0805	python-sqlalchemy: SQL injection flaw due to not checking LIMIT input for correct type	CRITICAL	9.3	2.89%		Jun 5, 2012

Rows per page

Showing 1 to 7 CVEs · page 1