Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/pygresql@1:5.1.2-1?distro=trixie
purl pkg:deb/debian/pygresql@1:5.1.2-1?distro=trixie
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (2)
Vulnerability Summary Aliases
VCID-8z74-udgw-kue3 The widely-used practice of escaping ASCII single quote "'" by turning it into "\'" is unsafe when operating in multibyte encodings that allow 0x5c (ASCII code for backslash) as the trailing byte of a multibyte character.more details CVE-2006-2314
VCID-z5df-1r9g-n7dz PyGreSQL Might Be Vulnerable to Encoding-Based SQL Injection The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings. CVE-2009-2940
GHSA-xv6x-43gq-4hfj

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T10:55:11.449175+00:00 Debian Importer Fixing VCID-z5df-1r9g-n7dz https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-16T09:56:00.577926+00:00 Debian Importer Fixing VCID-8z74-udgw-kue3 https://security-tracker.debian.org/tracker/data/json 38.4.0
2026-04-13T07:24:08.225390+00:00 Debian Importer Fixing VCID-z5df-1r9g-n7dz https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-13T06:39:01.125527+00:00 Debian Importer Fixing VCID-8z74-udgw-kue3 https://security-tracker.debian.org/tracker/data/json 38.3.0
2026-04-03T07:50:30.623396+00:00 Debian Importer Fixing VCID-z5df-1r9g-n7dz https://security-tracker.debian.org/tracker/data/json 38.1.0
2026-04-03T07:50:30.586953+00:00 Debian Importer Fixing VCID-8z74-udgw-kue3 https://security-tracker.debian.org/tracker/data/json 38.1.0