← Back

Tortoise Orm

tortoise_orm

Vendor: Tortoise Orm Project • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-11010
1Tortoise Orm Project
1Tortoise Orm
Jun 17, 2026
Apr 20, 2020
N/A· v4
8.8 HIGH· v3
6.5 MEDIUM· v2
In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filter...Show more
In Tortoise ORM before versions 0.15.23 and 0.16.6, various forms of SQL injection have been found for MySQL and when filtering or doing mass-updates on char/text fields. SQLite & PostgreSQL are only affected when filtering with contains, starts_with, or ends_with filters (and their case-insensitive counterparts).Show less