UnratedFix available
sqlalchemy — security advisory
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.
- Products
- sqlalchemy
- Affected versions
- Not specified
- Fixed versions
- 0.6.7-1
- CVEs
- CVE-2012-0805
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 31 Oct 2026, 23:13 UTC · Revision 1
Source evidence
Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.
osv:DEBIAN-CVE-2012-0805
sqlalchemy
Fixed versions: 0.6.7-1
sqlalchemy
Fixed versions: 0.6.7-1
sqlalchemy
Fixed versions: 0.6.7-1
Complete source record
{
"id": "82e893385f34ab7a5b738d8888739b0c2119f327fbeeb2d17f848a90c610eccb",
"url": "https://osv.dev/vulnerability/DEBIAN-CVE-2012-0805",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "DEBIAN-CVE-2012-0805",
"summary": "Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset keyword to the select function, or unspecified vectors to the (3) select.limit or (4) select.offset function.",
"evidence": "osv:DEBIAN-CVE-2012-0805",
"products": [
{
"name": {
"value": "sqlalchemy",
"evidence": "/affected/0/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.6.7-1",
"evidence": "/affected/0/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "sqlalchemy",
"evidence": "/affected/1/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.6.7-1",
"evidence": "/affected/1/ranges"
}
],
"affected_versions": []
},
{
"name": {
"value": "sqlalchemy",
"evidence": "/affected/2/package/name"
},
"prerequisites": [],
"fixed_versions": [
{
"value": "0.6.7-1",
"evidence": "/affected/2/ranges"
}
],
"affected_versions": []
}
],
"severity": "unknown",
"structured": {
"id": "DEBIAN-CVE-2012-0805",
"aliases": [
"DEBIAN-CVE-2012-0805"
],
"affected": [
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.6.7-1"
}
]
}
],
"package": {
"name": "sqlalchemy",
"purl": "pkg:deb/debian/sqlalchemy?arch=source&distro=bookworm",
"ecosystem": "Debian:12"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2012-0805.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.6.7-1"
}
]
}
],
"package": {
"name": "sqlalchemy",
"purl": "pkg:deb/debian/sqlalchemy?arch=source&distro=trixie",
"ecosystem": "Debian:13"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2012-0805.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
},
{
"ranges": [
{
"type": "ECOSYSTEM",
"events": [
{
"introduced": "0"
},
{
"fixed": "0.6.7-1"
}
]
}
],
"package": {
"name": "sqlalchemy",
"purl": "pkg:deb/debian/sqlalchemy?arch=source&distro=forky",
"ecosystem": "Debian:14"
},
"database_specific": {
"source": "https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2012-0805.json"
},
"ecosystem_specific": {
"urgency": "not yet assigned"
}
}
],
"modified": "2026-10-23T17:47:37.843466642Z",
"provider": "osv",
"upstream": [
"CVE-2012-0805"
],
"references": [
"https://security-tracker.debian.org/tracker/CVE-2012-0805"
]
},
"related_cves": [
{
"value": "CVE-2012-0805",
"evidence": "/upstream"
}
],
"security_relevant": true,
"severity_evidence": null
},
"source_id": "core-osv",
"document_id": 418027,
"published_at": "2012-06-05T22:55:08.077+00:00"
}