Approved changes feed: RSS · Atom
cpe:2.3:a:magic:asyncpg:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Magic (c8cf7943-835a-5204-a6be-802cfda4e86c) |
|---|---|
| Product | Asyncpg (c87199f4-bd95-53ba-87a0-48db7c5b0e9b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:deb/debian/asyncpg |
purl2cpe | 2026-06-01 10:15:51.432844 |
pkg:deb/ubuntu/asyncpg |
purl2cpe | 2026-06-01 10:15:51.432847 |
pkg:github/magicstack/asyncpg |
purl2cpe | 2026-06-01 10:15:51.432849 |
pkg:pypi/asyncpg |
purl2cpe | 2026-06-01 10:15:51.432852 |
pkg:rpm/fedora/python-asyncpg |
purl2cpe | 2026-06-01 10:15:51.432855 |
pkg:rpm/opensuse/python-asyncpg |
purl2cpe | 2026-06-01 10:15:51.432858 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-17446 |
vulnerable | 2026-06-08 05:20:56.496710 |
Details available
asyncpg before 0.21.0 allows a malicious PostgreSQL server to trigger a crash or execute arbitrary code (on a database client) via a crafted server response, because of access to an uninitialized pointer in the array data decoder.
Published: 2020-08-12T15:56:23.000Z
Updated: 2024-08-04T13:53:17.448Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.