GCVE-VVD-MAGEIA-2019-350

Advisory Published

Vulnetix · Advisory published November 30, 2019

Updated python-sqlalchemy packages fix security vulnerabilities: SQL Injection via the order_by parameter (CVE-2019-7164). SQL Injection via the group_by parameter (CVE-2019-7548).

Download JSON Open in Console

Affected Products

Vendor	Product	Versions	Platforms
Mageia	python-sqlalchemy	0 (affected), 1.2.19-1.mga7 (unaffected)	—

Aliases

CVE-2019-7548 CVE-2019-7164

Transitive aliases

GHSA-38fc-9xqv-7f7q EUVD-2019-0134 BDU:2020-03282 ALSA-2019:0984 VVD-GENTOO-2019-678480 GHSA-887w-45rq-vxgf ALSA-2019:0981 BDU:2021-00766 EUVD-2019-0133

References

Updated python-sqlalchemy packages fix security vulnerabilities

advisory

Updated python-sqlalchemy packages fix security vulnerabilities

issue

Updated python-sqlalchemy packages fix security vulnerabilities

issue

Browse GCVE Records

100 records in the GCVE database · Updated April 16, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON