tag

Ormar

Ormar ORM SQL Injection via min()/max() Aggregate Methods (CVE-2026-26198)

CVE-2026-26198 (GHSA-xxh2-68g9-8jqr)· Ormar (async Python ORM, commonly used with FastAPI/Starlette) patched