debian/pygresql vulnerabilities

Latest debian/pygresql CVEs

Newest publication first

1. CVE-2009-2940 PyGreSQL Might Be Vulnerable to Encoding-Based SQL Injection

   Published 2009-10-22

   High·CVSS 7.5

   The pygresql module 3.8.1 and 4.0 for Python does not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.

2. DSA-1911-1 pygresql - missing escape function

   Published 2009-10-14

   Unknown

3. CVE-2006-2314 PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in appli...

   Published 2006-05-24

   High·CVSS 7.5

   PostgreSQL 8.1.x before 8.1.4, 8.0.x before 8.0.8, 7.4.x before 7.4.13, 7.3.x before 7.3.15, and earlier versions allows context-dependent attackers to bypass SQL injection protection methods in applications that use multibyte encodings that allow the "" (backslash) byte 0x5c to...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.