piccolo-orm Piccolo Vulnerabilities

Piccolo-orm Piccolo vulnerabilities.

JSON RSS CSV 🔔 Create Alert Trigger

28 August 2026

Vulnerability in Piccolo Admin for Python Affects Session Management
CVE-2026-55485
Piccolo-ormPiccolo Admin8.8HIGH

2 April 2024

Piccolo Admin's raw SVG loading may lead to complete data compromise from admin page
CVE-2024-30248
Piccolo-ormPiccolo Admin7.7HIGH

10 November 2023

piccolo SQL Injection via named transaction savepoints
CVE-2023-47128
Piccolo-ormPiccolo9.1CRITICAL

12 September 2023

Piccolo's current `BaseUser.login` implementation is vulnerable to time based user enumeration
CVE-2023-41885
Piccolo-ormPiccolo5.3MEDIUM