Lucene search
+L

16 matches found

OSV
OSV
•added 2026/07/07 4:03 p.m.•18 views

PYSEC-2026-1766 pg8000 SQL injection vulnerability via a specially crafted Python list input

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

9.3CVSS8AI score0.00363EPSS
SaveExploits0References6
PyPA
PyPA
•added 2026/07/07 4:03 p.m.•22 views

pg8000 SQL injection vulnerability via a specially crafted Python list input

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

9.6CVSS8AI score0.00363EPSS
SaveExploits0References6Affected Software1
Photon
Photon
•added 2026/01/12 12:00 a.m.•12 views

Critical Photon OS Security Update - PHSA-2026-5.0-0736

Updates of 'python3-pg8000' packages of Photon OS have been released...

9.6CVSS5.8AI score0.00363EPSS
SaveExploits0
Photon
Photon
•added 2026/01/12 12:00 a.m.•19 views

Critical Photon OS Security Update - PHSA-2026-5.0-91-0736

Updates of 'python3-pg8000' packages of Photon OS have been released...

9.6CVSS7.4AI score0.00363EPSS
SaveExploits0
RedhatCVE
RedhatCVE
•added 2025/10/28 6:59 a.m.•22 views

CVE-2025-61385

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

9.6CVSS8.7AI score0.00363EPSS
SaveExploits0References1
OSV
OSV
•added 2025/10/27 6:31 p.m.•30 views

GHSA-WQ2G-R956-J8CC pg8000 SQL injection vulnerability via a specially crafted Python list input

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

9.3CVSS6.2AI score0.00363EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
•added 2025/10/27 6:31 p.m.•19 views

pg8000 SQL injection vulnerability via a specially crafted Python list input

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

9.6CVSS8.7AI score0.00363EPSS
SaveExploits0References4Affected Software1
EUVD
EUVD
•added 2025/10/27 6:31 p.m.•19 views

EUVD-2025-36226

pg8000 SQL injection vulnerability via a specially crafted Python list input...

7.5AI score0.00363EPSS
SaveExploits0References3
Snyk
Snyk
•added 2025/10/27 6:31 p.m.•5 views

SQL Injection

Overview pg8000 is a PostgreSQL interface library Affected versions of this package are vulnerable to SQL Injection via the literal function. An attacker can execute arbitrary SQL commands by supplying a specially crafted Python list as input. Remediation Upgrade pg8000 to version 1.31.5 or highe...

9.8CVSS8.5AI score0.00363EPSS
SaveExploits0References2
NVD
NVD
•added 2025/10/27 6:15 p.m.•20 views

CVE-2025-61385

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

9.6CVSS0.00363EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2025/10/27 12:00 a.m.•8 views

CVE-2025-61385

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

8.2AI score0.00363EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/10/27 12:00 a.m.•0 views

CVE-2025-61385: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

9.6CVSS8AI score0.00363EPSS
SaveExploits0References1
CVE
CVE
•added 2025/10/27 12:00 a.m.•98 views

CVE-2025-61385

A SQL injection vulnerability exists in the tlocke pg8000 library (version 1.31.4). Remote attackers can execute arbitrary SQL commands by providing a specially crafted Python list input to the pg8000.native.literal function. This vulnerability is associated with CWE-89 . Affected products includ...

9.6CVSS8.2AI score0.00363EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2025/10/27 12:00 a.m.•23 views

CVE-2025-61385

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

0.00363EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•19 views

pg8000 安全漏洞

pg8000 is a PostgreSQL database driver by tlocke individual developers. A security vulnerability exists in pg8000 version 1.31.4, which stems from not properly handling Python list input and could lead to an SQL injection attack...

9.6CVSS7.4AI score0.00363EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•9 views

PT-2025-44000

Name of the Vulnerable Software and Affected Versions pg8000 version 1.31.4 Description A SQL injection flaw exists in pg8000. This issue allows remote attackers to execute arbitrary SQL commands by providing a specially crafted Python list as input to the pg8000.native.literal function. The...

9.6CVSS7.5AI score0.00363EPSS
SaveExploits0References12
Rows per page
Query Builder