773 PoCs | 119 CISA KEV

tag

Orm

Django QuerySet/Q Object SQL Injection via `_connector` Kwarg (CVE-2025-64459) EPSS 19%

CVE-2025-64459 web Patched

CVE-2025-64459webCRITICAL 9.1Patched2026-07-06Sequelize ORM JSON Cast SQL Injection — CVE-2026-30951

CVE-2026-30951 web Patched

CVE-2026-30951webHIGHPatched2026-07-05Ormar ORM SQL Injection via min()/max() Aggregate Methods (CVE-2026-26198)

CVE-2026-26198 (GHSA-xxh2-68g9-8jqr) web Patched

CVE-2026-26198webCRITICAL 9.8Patched2026-07-05MikroORM Custom Type Raw SQL Injection (CVE-2026-34220)

CVE-2026-34220 web Patched

CVE-2026-34220webHIGHPatched2026-07-05