Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

1 record

Vendor: Magic Component: Asyncpg Clear all filters
TI-2020-13212 CVE-2020-17446 · GHSA-2xpj-f5g2-8p7m

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute…

Priority MEDIUM 47

asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array dat…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02417 Published 2020-08-12 Fixed in 0.21.0 CWE-824