Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 12:12:05 +0000 CVE-2020-17446 https://vulnerability.circl.lu/vuln/cve-2020-17446 <p>asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.</p> <p>asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.</p> https://vulnerability.circl.lu/vuln/cve-2020-17446 GHSA-2xpj-f5g2-8p7m — Asyncpg Arbitrary Code Execution Via Access to an Uninitialized Pointer https://vulnerability.circl.lu/vuln/ghsa-2xpj-f5g2-8p7m <p><strong>Affected:</strong> PyPI: asyncpg</p> <p>asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.</p> <p><strong>Affected:</strong> PyPI: asyncpg</p> <p>asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.</p> https://vulnerability.circl.lu/vuln/ghsa-2xpj-f5g2-8p7m PYSEC-2020-24 https://vulnerability.circl.lu/vuln/pysec-2020-24 <p><strong>Affected:</strong> PyPI: asyncpg</p> <p>asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.</p> <p><strong>Affected:</strong> PyPI: asyncpg</p> <p>asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.</p> https://vulnerability.circl.lu/vuln/pysec-2020-24