Vulnerabilities

TI-2026-40041 CVE-2026-55485 · GHSA-2gh4-jmwq-rr8w

Piccolo Admin: Privilege escalation - admin to superuser via session-token disclosure in GET /api/tables/sessions/.

HIGH 73

Piccolo Admin is an admin interface and content management system for Python, built on top of Piccolo.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00564 Published 2026-08-28 Fixed in 1.14.0 CWE-200

TI-2024-19994 CVE-2024-30248 · GHSA-pmww-v6c9-7p83

HIGH 69

Piccolo Admin is an admin interface/content management system for Python, built on top of Piccolo.

CVSS 3.1HIGH 7.7 Network Low privileges User interaction EPSS 0.00493 Published 2024-04-02 Fixed in 1.3.2 CWE-79

TI-2023-25468 CVE-2023-47128 · GHSA-xq59-7jf3-rjc6

HIGH 80

Piccolo is an object-relational mapping and query builder which supports asyncio.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00776 Published 2023-11-10 Fixed in 1.1.1 CWE-89

TI-2023-22277 CVE-2023-41885 · GHSA-h7cm-mrvq-wcfr

LOW 31

Piccolo is an ORM and query builder which supports asyncio.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00556 Published 2023-09-12 Fixed in 0.121.0 CWE-204