{"id":2889500,"name":"python-sql","ecosystem":"pypi","description":"Library to write SQL queries","homepage":null,"licenses":"BSD-3-Clause","normalized_licenses":["BSD-3-Clause"],"repository_url":null,"keywords_array":["SQL","database","query"],"namespace":null,"versions_count":26,"first_release_published_at":"2013-08-28T16:50:11.000Z","latest_release_published_at":"2026-04-03T21:41:21.000Z","latest_release_number":"1.8.1","last_synced_at":"2026-04-21T14:31:31.601Z","created_at":"2022-04-10T12:21:49.724Z","updated_at":"2026-04-21T14:31:31.602Z","registry_url":"https://pypi.org/project/python-sql/","install_command":"pip install python-sql --index-url https://pypi.org/simple","documentation_url":"https://python-sql.readthedocs.io/","metadata":{"funding":null,"documentation":null,"classifiers":["Development Status :: 5 - Production/Stable","Intended Audience :: Developers","Topic :: Database","Topic :: Software Development :: Libraries :: Python Modules"],"normalized_name":"python-sql","project_status":null},"repo_metadata":{},"repo_metadata_updated_at":"2024-09-08T14:25:56.837Z","dependent_packages_count":75,"downloads":60385,"downloads_period":"last-month","dependent_repos_count":110,"rankings":{"downloads":1.8274398087136305,"dependent_repos_count":1.413461026238998,"dependent_packages_count":0.1696724335564723,"stargazers_count":null,"forks_count":null,"docker_downloads_count":1.039744366571074,"average":1.1125794087700436},"purl":"pkg:pypi/python-sql","advisories":[{"uuid":"GSA_kwCzR0hTQS1wcTlwLXBjM3AtOWhtNM4ABCt3","url":"https://github.com/advisories/GHSA-pq9p-pc3p-9hm4","title":"python-sql SQL injection vulnerability","description":"A vulnerability was found in python-sql where unary operators do not escape non-Expression (like `And` and `Or`) which makes any system exposing those vulnerable to an SQL injection attack.","origin":"UNSPECIFIED","severity":"MODERATE","published_at":"2024-12-27T03:31:23.000Z","withdrawn_at":null,"classification":"GENERAL","cvss_score":6.5,"cvss_vector":"CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:N","references":["https://nvd.nist.gov/vuln/detail/CVE-2024-9774","https://discuss.tryton.org/t/security-release-for-issue-93/7889/3","https://lists.debian.org/debian-lts-announce/2024/10/msg00023.html","https://bugs.tryton.org/python-sql/93","https://discuss.tryton.org/t/security-release-for-issue-93/7889","https://foss.heptapod.net/tryton/python-sql/-/commit/f20551bbb8b3b4c4dd0a2c3d36f377bff6f2f349","https://bugzilla.redhat.com/show_bug.cgi?id=2332734","https://access.redhat.com/security/cve/CVE-2024-9774","https://github.com/advisories/GHSA-pq9p-pc3p-9hm4"],"source_kind":"github","identifiers":["GHSA-pq9p-pc3p-9hm4","CVE-2024-9774"],"repository_url":null,"blast_radius":0.0,"created_at":"2024-12-27T19:08:15.493Z","updated_at":"2026-04-05T20:03:43.079Z","epss_percentage":0.00278,"epss_percentile":0.50792,"api_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wcTlwLXBjM3AtOWhtNM4ABCt3","html_url":"https://advisories.ecosyste.ms/advisories/GSA_kwCzR0hTQS1wcTlwLXBjM3AtOWhtNM4ABCt3","packages":[{"ecosystem":"pypi","package_name":"python-sql","versions":[{"first_patched_version":"1.5.2","vulnerable_version_range":"\u003c 1.5.2"}],"purl":"pkg:pypi/python-sql"}],"related_packages_url":"https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1wcTlwLXBjM3AtOWhtNM4ABCt3/related_packages","related_advisories":[]}],"docker_usage_url":"https://docker.ecosyste.ms/usage/pypi/python-sql","docker_dependents_count":1,"docker_downloads_count":229102,"usage_url":"https://repos.ecosyste.ms/usage/pypi/python-sql","dependent_repositories_url":"https://repos.ecosyste.ms/api/v1/usage/pypi/python-sql/dependencies","status":null,"funding_links":[],"critical":null,"issue_metadata":null,"versions_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/python-sql/versions","version_numbers_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/python-sql/version_numbers","dependent_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/python-sql/dependent_packages","related_packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/python-sql/related_packages","codemeta_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/packages/python-sql/codemeta","maintainers":[{"uuid":"ced","login":"ced","name":null,"email":null,"url":null,"packages_count":250,"html_url":"https://pypi.org/user/ced/","role":null,"created_at":"2022-12-12T17:17:15.184Z","updated_at":"2022-12-12T17:17:15.184Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/ced/packages"},{"uuid":"nicoe","login":"nicoe","name":null,"email":null,"url":null,"packages_count":228,"html_url":"https://pypi.org/user/nicoe/","role":null,"created_at":"2022-12-12T17:17:15.188Z","updated_at":"2022-12-12T17:17:15.188Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/nicoe/packages"},{"uuid":"pokoli","login":"pokoli","name":null,"email":null,"url":null,"packages_count":87,"html_url":"https://pypi.org/user/pokoli/","role":null,"created_at":"2022-12-12T17:17:15.193Z","updated_at":"2022-12-12T17:17:15.193Z","packages_url":"https://packages.ecosyste.ms/api/v1/registries/pypi.org/maintainers/pokoli/packages"}]}