PyPI/piccolo — 4 CVEs

CRITICAL9.1CVE-2023-47128piccolo SQL Injection via named transaction savepoints

from 0, < 1.1.1

CRITICAL9.1CVE-2023-47128piccolo SQL Injection via named transaction savepoints

from 0, < 82679eb8cd1449cf31d87c9914a072e70168b6eb | from 0

MEDIUM5.3CVE-2023-41885Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration

from 0, < 0.121.0

MEDIUM5.3Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration

from 0, < edcfe3568382922ba3e3b65896e6e7272f972261 | from 0, < 0.121.0

pkg:PyPI/piccolo