[sontek]

http://sqlalchemy.org/ is an ORM and does not have these security issues. So it can be done.

[qxcv]

Searching for "sqlalchemy sql injection" brings up this: https://bugzilla.redhat.com/show_bug.cgi?id=783305

[jeltz]

I did not say otherwise. I said that ORMs may be vulnerable if they are carelessly constructed.