http://sqlalchemy.org/ is an ORM and does not have these security issues. So it ... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		sontek on Jan 3, 2013 \| parent \| context \| favorite \| on: SQL Injection Vulnerability in Ruby on Rails; affe... http://sqlalchemy.org/ is an ORM and does not have these security issues. So it can be done.

qxcv on Jan 3, 2013 | [–]

Searching for "sqlalchemy sql injection" brings up this: https://bugzilla.redhat.com/show_bug.cgi?id=783305

jeltz on Jan 3, 2013 | [–]

I did not say otherwise. I said that ORMs may be vulnerable if they are carelessly constructed.

Consider applying for YC's Summer 2026 batch! Applications are open till May 4
Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact