Vulnerabilities in piccolo-orm

4 results

CVE-2023-47128CRITICALpiccolo SQL Injection via named transaction savepointsEPSS 0.8%CVE-2026-55485HIGHPiccolo Admin: Privilege escalation - admin to superuser via session-token disclosure in GET /api/tables/sessions/.EPSS 0.6%CVE-2023-41885MEDIUMPiccolo's current `BaseUser.login` implementation is vulnerable to time based user enumerationEPSS 0.6%CVE-2024-30248HIGHPiccolo Admin's raw SVG loading may lead to complete data compromise from admin pageEPSS 0.5%