PT-2025-54849 · Pypi · Asyncmy

Publicado 2025-12-02 · Atualizado 2025-12-02

OSV

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SQL injection vulnerability in long2ice asyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via crafted dict keys.

Correção

SQL injection

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

GHSA-QHQW-RRW9-25RM

Produtos afetados

Asyncmy

Referências · 4

• https://github.com/long2ice/asyncmy · Nota
• https://github.com/long2ice/asyncmy/issues/134 · Nota
• https://osv.dev/vulnerability/GHSA-qhqw-rrw9-25rm · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2025-65896 · Nota de Segurança