txt：後藤真理絵(ヤフー株式会社) 構成：編集部Ethical AIとは何か2019年3月8日～3…
[SQLAlchemy] Moderate severity vulnerability that affects SQLAlchemy
SQLAlchemy through 1.2.17 and 1.3.x through 1.3.0b2 allows SQL Injection via the order_by parameter.
References
https://nvd.nist.gov/vuln/detail/CVE-2019-7164
https://github.com/sqlalchemy/sqlalchemy/issues/4481
https://access.redhat.com/errata/RHSA-2…