PT-2026-53382 · Pypi · Asyncmy

Published 2026-06-29 · Updated 2026-06-29

OSV

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

SQL injection vulnerability in long2ice asyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via crafted dict keys.

Fix

Related Identifiers

PYSEC-2026-286

Affected Products

Asyncmy

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-65896 · Security Note
• https://osv.dev/vulnerability/PYSEC-2026-286 · Vendor Advisory
• https://github.com/long2ice/asyncmy/issues/134 · Note
• https://github.com/long2ice/asyncmy · Note
• https://pypi.org/project/asyncmy · Note
• https://github.com/advisories/GHSA-qhqw-rrw9-25rm · Note