Vulnerabilities in piccolo-orm

3 results

CVE-2023-47128CRITICALpiccolo SQL Injection via named transaction savepointsEPSS 0.8%CVE-2024-30248HIGHPiccolo Admin's raw SVG loading may lead to complete data compromise from admin pageEPSS 0.5%CVE-2023-41885MEDIUMPiccolo's current `BaseUser.login` implementation is vulnerable to time based user enumerationEPSS 0.5%