python-sqlalchemy-doc

Direct Vulnerabilities

Known vulnerabilities in the python-sqlalchemy-doc package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
H Improper Neutralization of Special Elements in Data Query Logic	<0:1.3.2-3.module+el8.10.0+20981+3704b446
H Directory Traversal	*
H Improper Validation of Certificate with Host Mismatch	*
M Link Following	*
M Directory Traversal	*
L Inefficient Regular Expression Complexity	*
M Incorrect Execution-Assigned Permissions	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M CRLF Injection	*
L Improper Handling of Structural Elements	*
M Link Following	*
M Out-of-bounds Write	*
M Unchecked Input for Loop Condition	*
M Insufficient Entropy	*
M Integer Overflow or Wraparound	*
M Cross-site Scripting (XSS)	*
M Untrusted Pointer Dereference	*
M CRLF Injection	*
L Directory Traversal	*
M Buffer Access with Incorrect Length Value	*
M Incomplete Filtering of Special Elements	*
L Insufficient Logging	*
M Improper Input Validation	*
M Arbitrary Code Injection	*
M CRLF Injection	*
M Improper Neutralization	*
M CRLF Injection	*
M Allocation of Resources Without Limits or Throttling	*
L Allocation of Resources Without Limits or Throttling	*
M Improper Handling of Length Parameter Inconsistency	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Use After Free	*
M Directory Traversal	*
M Inefficient Regular Expression Complexity	*
L Out-of-bounds Read	<0:1.3.2-3.module+el8.10.0+20981+3704b446
L Improper Handling of Inconsistent Special Elements	*
H OS Command Injection	<0:1.3.2-3.module+el8.10.0+20981+3704b446
M Improper Input Validation	*
L Resource Exhaustion	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M CRLF Injection	*
L Race Condition	*
L Expected Behavior Violation	*
M Cross-site Scripting (XSS)	<0:1.3.2-2.module+el8.9.0+19487+7dc18407
M Information Exposure	<0:1.3.2-2.module+el8.9.0+19487+7dc18407
M XML External Entity (XXE) Injection	<0:1.3.2-2.module+el8.9.0+19487+7dc18407
M Incorrect Regular Expression	<0:1.3.2-2.module+el8.9.0+19487+7dc18407
M Use After Free	<0:1.3.2-2.module+el8.9.0+19487+7dc18407
M Resource Leak	<0:1.3.2-2.module+el8.9.0+19487+7dc18407
H Authentication Bypass by Primary Weakness	<0:1.3.2-2.module+el8.3.0+6647+8d010749
H Improper Input Validation	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Resource Exhaustion	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Arbitrary Argument Injection	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Arbitrary Code Injection	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Unchecked Return Value	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Cross-site Scripting (XSS)	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Directory Traversal	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Resource Exhaustion	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Buffer Overflow	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M HTTP Request Smuggling	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Cross-site Scripting (XSS)	<0:1.3.2-2.module+el8.3.0+6647+8d010749
L Eval Injection	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M HTTP Response Splitting	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M HTTP Response Splitting	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Cross-site Scripting (XSS)	<0:1.3.2-1.module+el8.1.0+2994+98e054d6
M Improper Input Validation	<0:1.3.2-1.module+el8.1.0+2994+98e054d6
M Directory Traversal	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Improper Input Validation	<0:1.3.2-1.module+el8.1.0+2994+98e054d6
M Insufficiently Protected Credentials	<0:1.3.2-1.module+el8.1.0+2994+98e054d6
M Insufficiently Protected Credentials	<0:1.3.2-1.module+el8.1.0+2994+98e054d6
M HTTP Response Splitting	<0:1.3.2-1.module+el8.1.0+2994+98e054d6
M Exposed Dangerous Method or Function	<0:1.3.2-1.module+el8.1.0+2994+98e054d6
M HTTP Response Splitting	<0:1.3.2-1.module+el8.1.0+2994+98e054d6
M Deserialization of Untrusted Data	<0:1.3.2-1.module+el8.1.0+2994+98e054d6
M HTTP Response Splitting	<0:1.3.2-1.module+el8.1.0+2994+98e054d6
M Improper Certificate Validation	<0:1.3.2-1.module+el8.1.0+2994+98e054d6
H SQL Injection	<0:1.3.2-1.module+el8.0.0+2974+76d21d2e
H SQL Injection	<0:1.3.2-1.module+el8.0.0+2974+76d21d2e
H Encoding Error	<0:1.3.2-1.module+el8.0.0+2974+76d21d2e
M Cross-site Scripting (XSS)	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Resource Exhaustion	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Loop with Unreachable Exit Condition ('Infinite Loop')	<0:1.3.2-2.module+el8.3.0+6647+8d010749
M Inefficient Regular Expression Complexity	<0:1.3.2-2.module+el8.3.0+6647+8d010749
L Improper Handling of Highly Compressed Data (Data Amplification)	*

Vulnerability

Vulnerable Version

Improper Neutralization of Special Elements in Data Query Logic

<0:1.3.2-3.module+el8.10.0+20981+3704b446