Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:pypi/pygresql@3.8.1
purl pkg:pypi/pygresql@3.8.1
Next non-vulnerable version 4.1
Latest non-vulnerable version 4.1
Risk score
Vulnerabilities affecting this package (3)
Advisory Summary Fixed in package version
CVE-2009-2940
Aliases:
GHSA-xv6x-43gq-4hfj
PyGreSQL Might Be Vulnerable to Encoding-Based SQL Injection PyGreSQL 3.8 did not use PostgreSQL’s safe `string` and `bytea` functions in … There are no reported fixed by versions.
GHSA-xv6x-43gq-4hfj
Aliases:
CVE-2009-2940
PyGreSQL Might Be Vulnerable to Encoding-Based SQL Injection PyGreSQL 3.8 did not use PostgreSQL’s safe `string` and `bytea` functions in … There are no reported fixed by versions.
PYSEC-2009-18
Aliases:
CVE-2009-2940
GHSA-xv6x-43gq-4hfj
The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers … There are no reported fixed by versions.
This package is not known to fix any advisories.