asyncpg

Releases43

Frequency2 months 2 weeks

Last Release8 months ago

An asyncio PostgreSQL driver

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2020-17446OSV↗	< 0.21.0	Aug 12, 2020Wednesday, 12 August 2020, 16:15	9.8 CRITICAL	7.5 HIGH
asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.