ormar vulnerabilities

1 known vulnerability in ormar from Ormar-orm. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  ormar is a async mini ORM for Python. Versions 0.23.0 and below are vulnerable to Pydantic…

  CVE-2026-27953Mar 19, 2026Ormar-ormEPSS 1.36%

  ormar is a async mini ORM for Python. Versions 0.23.0 and below are vulnerable to Pydantic validation bypass through the model constructor, allowing any unauthenticated user to skip all field validation by injecting "__pk_only__": true into a JSON request body