HIGH7.1PyPI
GHSA-f964-whrq-44h8· CVE-2026-27953, PYSEC-2026-2247ormar Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor
Modified: 7/13/2026
package
PyPI/ormar
pkg:pypi/ormar
CRITICAL9.8PyPI
GHSA-xxh2-68g9-8jqr· CVE-2026-26198, PYSEC-2026-439ormar is vulnerable to SQL Injection through aggregate functions min() and max()
Modified: 6/29/2026
CRITICAL9.8PyPI
PYSEC-2026-2247· CVE-2026-27953, GHSA-f964-whrq-44h8Modified: 7/13/2026
CRITICAL9.8PyPI
PYSEC-2026-439· CVE-2026-26198, GHSA-xxh2-68g9-8jqrormar is vulnerable to SQL Injection through aggregate functions min() and max()
Modified: 7/13/2026