MagicStack/asyncpg

MagicStack/asyncpg

GitHubGitHub
GitHubgithub.com
Releases41
Frequency2 months 3 weeks
Last Release
Stars8.04K
A fast PostgreSQL Database Client Library for Python/asyncio.
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-17446↗
9.8 CRITICAL7.5 HIGH

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.