CVE-2020-11010
SQL injection in Tortoise ORM
概要
SQL injection in Tortoise ORM
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Impact
Various forms of SQL injection has been found, for MySQL and when filtering or doing mass-updates on char/text fields.
SQLite & PostgreSQL was only affected when filtering with contains, starts_with or ends_with filters (and their case-insensitive counterparts)
Patches
Please upgrade to 0.15.23+ or 0.16.6+
For more information
If you have any questions or comments about this advisory:
出典: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
影響パッケージ
PyPI
tortoise-orm
[{"type":"ECOSYSTEM","events":[{"introduced":"0.16.0"},{"fixed":"0.16.6"}]}]
参照URL
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web github.com