Sqlalchemy

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.CVE-2019-7164Sqlalchemy · 3.5% likely

   CWE-89

2. Multiple SQL injection vulnerabilities in SQLAlchemy before 0.7.0b4, as used in Keystone, allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset…CVE-2012-0805Sqlalchemy · 2.8% likely

   CWE-89

3. SQLAlchemy 1.2.17 has SQL Injection when the group_by parameter can be controlled.CVE-2019-7548Sqlalchemy · 1.8% likely

   CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.