PT-2025-54849 · Pypi · Asyncmy

Published 2025-12-02 · Updated 2025-12-02

OSV

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SQL injection vulnerability in long2ice asyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via crafted dict keys.

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

GHSA-QHQW-RRW9-25RM

Affected Products

Asyncmy

References · 4

• https://osv.dev/vulnerability/GHSA-qhqw-rrw9-25rm · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-65896 · Security Note
• https://github.com/long2ice/asyncmy · Note
• https://github.com/long2ice/asyncmy/issues/134 · Note