Sqlalchemy — PoC Archivehttps://poc.intelseclab.com/tags/sqlalchemy/Latest proof-of-concept entries.Hugoen-usSun, 05 Jul 2026 00:00:00 +0000Ormar ORM SQL Injection via min()/max() Aggregate Methods (CVE-2026-26198)https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26198-ormar-orm-sqli/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/web/2026-07-05_cve-2026-26198-ormar-orm-sqli/Critical severity (CVSS 9.8) — web · CVE-2026-26198 (GHSA-xxh2-68g9-8jqr). Status: PoC. Affects: Ormar (async Python ORM, commonly used with FastAPI/Starlette). Tags: sql-injection, python, ormar, orm, fastapi, sqlalchemy, cwe-89, unauthenticated.webCriticalsql-injectionpythonormarormfastapisqlalchemycwe-89unauthenticatedChatterBot Denial of Service via SQLAlchemy Connection Pool Exhaustion (CVE-2026-23842)https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-23842-chatterbot-dos-pool-exhaustion/Sun, 05 Jul 2026 00:00:00 +0000https://poc.intelseclab.com/pocs/misc/2026-07-05_cve-2026-23842-chatterbot-dos-pool-exhaustion/High severity (CVSS 7.5) — misc · CVE-2026-23842. Status: PoC. Affects: ChatterBot (Python conversational AI library). Tags: chatterbot, denial-of-service, sqlalchemy, connection-pool-exhaustion, python, cwe-400, resource-exhaustion.miscHighchatterbotdenial-of-servicesqlalchemyconnection-pool-exhaustionpythoncwe-400resource-exhaustion