CVE-2025-61385
2 advisories.
PyPI/pg8000 CVE-2025-61385: high, EPSS 0.36%
pg8000 SQL injection vulnerability via a specially crafted Python list input
Action: Upgrade pg8000 to 1.31.5 or later.
pip install pg8000==1.31.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.31.5 | - |
Fixed versions
| 1.31.5 |
Sources
- osv: GHSA-wq2g-r956-j8cc
- https://nvd.nist.gov/vuln/detail/CVE-2025-61385
- https://codeberg.org/tlocke/pg8000
- https://codeberg.org/tlocke/pg8000/commit/8663c746b02286c32f19c385f0e2e5da9e4fa140
- https://github.com/bmcyver/vulnerability-research/tree/main/CVE-2025-61385
CVE-2025-61385 · published · modified · JSON
PyPI/pg8000 CVE-2025-61385: unknown, EPSS 0.36%
pg8000 SQL injection vulnerability via a specially crafted Python list input
Action: Upgrade pg8000 to 1.31.5 or later.
pip install pg8000==1.31.5Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.31.5 | - |
Fixed versions
| 1.31.5 |
Sources
- osv: PYSEC-2026-1766
- https://nvd.nist.gov/vuln/detail/CVE-2025-61385
- https://codeberg.org/tlocke/pg8000
- https://codeberg.org/tlocke/pg8000/commit/8663c746b02286c32f19c385f0e2e5da9e4fa140
- https://github.com/bmcyver/vulnerability-research/tree/main/CVE-2025-61385
- https://pypi.org/project/pg8000
- https://github.com/advisories/GHSA-wq2g-r956-j8cc
CVE-2025-61385 · published · modified · JSON