Skip to content
OpenAdvisories

Package · Debian

asyncpg

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2020-17446

    Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer

    asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.

    asyncpg asyncpg asyncpg Debian Ubuntu PyPI