FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

py-ormar -- vulnerabilities

Affected packages
	py310-ormar	<	0.23.1
	py311-ormar	<	0.23.1
	py312-ormar	<	0.23.1
	py313-ormar	<	0.23.1
	py313t-ormar	<	0.23.1
	py314-ormar	<	0.23.1

Details

VuXML ID	8d549898-3598-11f1-a8bc-3c7c3fba4204
Discovery	2026-02-22
Entry	2026-04-11

https://github.com/ormar-orm/ormar/security/advisories reports:

SQL Injection in aggregate functions min() and max()

Pydantic Validation Bypass via __pk_only__ and __excluded__ Kwargs Injection in Model Constructor

[source]

References

CVE Name	CVE-2026-26198
CVE Name	CVE-2026-27953
URL	https://github.com/ormar-orm/ormar/security/advisories/GHSA-f964-whrq-44h8
URL	https://github.com/ormar-orm/ormar/security/advisories/GHSA-xxh2-68g9-8jqr