cbcvebase.

Magic Asyncpg vulnerabilities

1 known vulnerability affecting magic/asyncpg.

Total CVEs
1
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
CRITICAL1

Vulnerabilities

Page 1 of 1
CVE-2020-17446P3CRITICALCVSS 9.8fixed in 0.21.02020-08-12
CVE-2020-17446 [CRITICAL] CWE-824 CVE-2020-17446: asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary c asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.
ghsanvdosv
Magic Asyncpg vulnerabilities | cvebase