sqlalchemy@1.2.10 vulnerabilities

Database Abstraction Library

Known vulnerabilities in the sqlalchemy package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
H SQL Injection SQLAlchemy is a python SQL Toolkit and Object Relational Mapper. Affected versions of this package are vulnerable to SQL Injection when the `group_by` and `order_by` parameter can be controlled. NOTE: This vulnerability has also been identified as: CVE-2019-7164 How to fix SQL Injection? Upgrade `SQLAlchemy` to version 1.2.18 or higher.	[,1.2.18)
H SQL Injection SQLAlchemy is a python SQL Toolkit and Object Relational Mapper. Affected versions of this package are vulnerable to SQL Injection when the `group_by` and `order_by` parameter can be controlled. NOTE: This vulnerability has also been identified as: CVE-2019-7548 How to fix SQL Injection? Upgrade `SQLAlchemy` to version 1.2.18 or higher.	[,1.2.18)