Description
SQL injection vulnerability in long2ice assyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via crafted dict keys.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| PyPI | asyncmy | <= 0.2.11 | — | GHSA-qhqw-rrw9-25rm |
Critical · 9.8
CVE-2025-65896
EUVD-2025-200319GHSA-qhqw-rrw9-25rmPYSEC-2026-286
asyncmy is vulnerable to SQL injection via crafted dict keys
Published Dec 2, 2025 · Updated Dec 3, 2025 · Assigned by mitre