Lucene search
+L

9 matches found

osv_pysec
osv_pysec
•added 2026/07/07 4:03 p.m.•26 views

PYSEC-2026-1766 pg8000 SQL injection vulnerability via a specially crafted Python list input

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

9.3CVSS8.1AI score0.00363EPSS
SaveExploits0References6
PyPA
PyPA
•added 2026/07/07 4:03 p.m.•27 views

pg8000 SQL injection vulnerability via a specially crafted Python list input

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

9.6CVSS8.1AI score0.00363EPSS
SaveExploits0References6Affected Software1
RedhatCVE
RedhatCVE
•added 2025/10/28 6:59 a.m.•26 views

CVE-2025-61385

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

9.6CVSS8.1AI score0.00363EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2025/10/27 6:31 p.m.•40 views

GHSA-WQ2G-R956-J8CC pg8000 SQL injection vulnerability via a specially crafted Python list input

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

9.3CVSS8.1AI score0.00363EPSS
SaveExploits0References4
CNNVD
CNNVD
•added 2025/10/27 12:00 a.m.•26 views

pg8000 security vulnerability

pg8000 is a PostgreSQL database driver by tlocke individual developers. A security vulnerability exists in pg8000 version 1.31.4, which stems from not properly handling Python list input and could lead to an SQL injection attack...

9.6CVSS7.5AI score0.00363EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•2 views

PT-2025-45785

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

9.6CVSS8.1AI score0.00363EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
•added 2025/10/27 12:00 a.m.•13 views

CVE-2025-61385

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

8.1AI score0.00363EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2025/10/27 12:00 a.m.•11 views

PT-2025-44000

Name of the Vulnerable Software and Affected Versions pg8000 version 1.31.4 Description A SQL injection flaw exists in pg8000. This issue allows remote attackers to execute arbitrary SQL commands by providing a specially crafted Python list as input to the pg8000.native.literal function. The...

9.6CVSS8AI score0.00363EPSS
SaveExploits0References12
Cvelist
Cvelist
•added 2025/10/27 12:00 a.m.•25 views

CVE-2025-61385

SQL injection vulnerability in tlocke pg8000 1.31.4 allows remote attackers to execute arbitrary SQL commands via a specially crafted Python list input to function pg8000.native.literal...

0.00363EPSS
SaveExploits0References2
Rows per page
Query Builder