piccolo-orm vulnerabilities

4 published CVEs name piccolo-orm among the affected products.

Critical 1High 2Medium 1Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-55485
Piccolo Admin: Privilege escalation - admin to superuser via session-token disclosure in GET /api/tables/sessions/.
piccolo-orm · piccolo_admin
High8.8
CVE-2024-30248
Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page
piccolo-orm · piccolo_admin
High7.7
CVE-2023-47128
piccolo SQL Injection via named transaction savepoints
piccolo-orm · piccolo
Critical9.1
CVE-2023-41885
Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
piccolo-orm · piccolo
Medium5.3