[{"CVE":"CVE-2019-7548","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1674059","bugzilla_description":"CVE-2019-7548 python-sqlalchemy: SQL Injection when the group_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":"CWE-89","affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7548.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2019-7164","severity":"moderate","public_date":"2019-02-01T00:00:00Z","advisories":["RHSA-2019:0984","RHSA-2019:0981"],"bugzilla":"1678520","bugzilla_description":"CVE-2019-7164 python-sqlalchemy: SQL Injection when the order_by parameter can be controlled","cvss_score":null,"cvss_scoring_vector":null,"CWE":null,"affected_packages":["python27:2.7-8000020190410132513.c0efe978","python36:3.6-8000020190410133122.593c47b3"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2019-7164.json","cvss3_scoring_vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","cvss3_score":"7.3"},{"CVE":"CVE-2012-0805","severity":"moderate","public_date":"2012-03-07T00:00:00Z","advisories":["RHSA-2012:0369"],"bugzilla":"783305","bugzilla_description":"CVE-2012-0805 python-sqlalchemy: SQL injection flaw due to not checking LIMIT input for correct type","cvss_score":4.3,"cvss_scoring_vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","CWE":null,"affected_packages":["python-sqlalchemy-0:0.5.5-3.el6_2"],"resource_url":"https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-0805.json"}]