Advisories for Pypi/Piccolo package

The handling of named transaction savepoints in all database implementations is vulnerable to SQL Injection as user provided input is passed directly to connection.execute(…) via f-strings.

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') in piccolo.