Skip to content

[GHSA-qhqw-rrw9-25rm] assyncmy is vulnerable to SQL injection via crafted dict keys#7140

Merged
advisory-database[bot] merged 1 commit intojfsoden/advisory-improvement-7140from
jfsoden-GHSA-qhqw-rrw9-25rm
Mar 10, 2026
Merged

[GHSA-qhqw-rrw9-25rm] assyncmy is vulnerable to SQL injection via crafted dict keys#7140
advisory-database[bot] merged 1 commit intojfsoden/advisory-improvement-7140from
jfsoden-GHSA-qhqw-rrw9-25rm

Conversation

@jfsoden
Copy link

@jfsoden jfsoden commented Mar 10, 2026

Updates

  • Affected products
  • Description
  • Summary

Comments
The linked github issue is still not resolved, there was only a new upstream version released without the fix.

Copilot AI review requested due to automatic review settings March 10, 2026 09:58
@github-actions github-actions bot changed the base branch from main to jfsoden/advisory-improvement-7140 March 10, 2026 09:59
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the GHSA advisory for the asyncmy SQL injection issue to reflect revised package/version details and correct naming.

Changes:

  • Corrected package name from assyncmy to asyncmy in the summary.
  • Updated affected version range (last_affected) and narrative details from 0.2.10 to 0.2.11.
  • Bumped the advisory modified timestamp.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.

@advisory-database advisory-database bot merged commit 67c912b into jfsoden/advisory-improvement-7140 Mar 10, 2026
7 of 8 checks passed
@advisory-database
Copy link
Contributor

Hi @jfsoden! Thank you so much for contributing to the GitHub Advisory Database. This database is free, open, and accessible to all, and it's people like you who make it great. Thanks for choosing to help others. We hope you send in more contributions in the future!

@advisory-database advisory-database bot deleted the jfsoden-GHSA-qhqw-rrw9-25rm branch March 10, 2026 17:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants