MEDIUM5.3PyPI
GHSA-h7cm-mrvq-wcfr· CVE-2023-41885, PYSEC-2023-173Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
Modified: 2/16/2024
package
PyPI/piccolo
pkg:pypi/piccolo
CRITICAL9.1PyPI
GHSA-xq59-7jf3-rjc6· CVE-2023-47128, PYSEC-2023-241piccolo SQL Injection via named transaction savepoints
Modified: 6/9/2026
MEDIUM5.3PyPI
PYSEC-2023-173· CVE-2023-41885, GHSA-h7cm-mrvq-wcfrModified: 11/8/2023
CRITICAL9.1PyPI
PYSEC-2023-241· CVE-2023-47128, GHSA-xq59-7jf3-rjc6Modified: 6/8/2026