piccolo-orm vulnerabilities
4 published CVEs name piccolo-orm among the affected products.
- 4Published CVEs4 of them scored
- 1Last 12 monthspublished in the last year
- 1Critical2 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-55485
Piccolo Admin: Privilege escalation - admin to superuser via session-token disclosure in GET /api/tables/sessions/.
piccolo-orm · piccolo_admin
High8.8 - CVE-2024-30248
Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page
piccolo-orm · piccolo_admin
High7.7 - CVE-2023-47128
piccolo SQL Injection via named transaction savepoints
piccolo-orm · piccolo
Critical9.1 - CVE-2023-41885
Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
piccolo-orm · piccolo
Medium5.3