tag
Sqlalchemy
Critical
Ormar ORM SQL Injection via min()/max() Aggregate Methods (CVE-2026-26198)
CVE-2026-26198 (GHSA-xxh2-68g9-8jqr)·
Ormar (async Python ORM, commonly used with FastAPI/Starlette)
patched
High
ChatterBot Denial of Service via SQLAlchemy Connection Pool Exhaustion (CVE-2026-23842)
CVE-2026-23842·
ChatterBot (Python conversational AI library)
patched