-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| pg8000 | pip | <= 1.31.4 | 1.31.5 |
Miggo AIRoot Cause AnalysisThe analysis is based on the detailed vulnerability description provided, which explicitly names the vulnerable function pg8000.native.literal and the nature of the vulnerability (SQL injection via crafted list input). Despite being unable to fetch the specific commit patch due to accessibility issues with the provided URLs, the description provides sufficient detail to identify the vulnerable function with a high degree of confidence. The root cause of the vulnerability is the improper handling of list inputs within the literal function, which allows for the injection of malicious SQL code.
PythonPythonOngoing coverage of React2Shell