Ecosystem	Package	Version

Vulnerabilities

CVE-2025-65896

CVE-2025-65896

SQL injection vulnerability in long2ice assyncmy thru 0.2.10 allows attackers to execute arbitrary SQL commands via crafted dict keys.

Published Dec 3, 2025

https://github.com/long2ice/asyncmy/issues/134

CVSS ScoreCritical

9.3

Ecosystem	Package	Version


pypi	asyncmy	0.1.1
pypi	asyncmy	0.1.2
pypi	asyncmy	0.1.3
pypi	asyncmy	0.1.4
pypi	asyncmy	0.1.5
pypi	asyncmy	0.1.6
pypi	asyncmy	0.1.7
pypi	asyncmy	0.1.8
pypi	asyncmy	0.1.9
pypi	asyncmy	0.2.0
pypi	asyncmy	0.2.10
pypi	asyncmy	0.2.10rc1
pypi	asyncmy	0.2.11
pypi	asyncmy	0.2.1
pypi	asyncmy	0.2.2
pypi	asyncmy	0.2.3
pypi	asyncmy	0.2.4
pypi	asyncmy	0.2.5
pypi	asyncmy	0.2.6
pypi	asyncmy	0.2.7
pypi	asyncmy	0.2.7rc1
pypi	asyncmy	0.2.7rc2
pypi	asyncmy	0.2.7rc3
pypi	asyncmy	0.2.7rc4
pypi	asyncmy	0.2.7rc5
pypi	asyncmy	0.2.7rc6
pypi	asyncmy	0.2.8
pypi	asyncmy	0.2.8rc1
pypi	asyncmy	0.2.8rc2
pypi	asyncmy	0.2.9
pypi	asyncmy-dev-branch	0.2.6
rpm	python-asyncmy	0.2.10-1.el10_0
rpm	python-asyncmy	0.2.10-1.el9
rpm	python-asyncmy	0.2.11-12.el10_3
rpm	python-asyncmy	0.2.11-2.el9
rpm	python-asyncmy	0.2.5-3.el9
rpm	python-asyncmy	0.2.5-6.el9
rpm	python-asyncmy	0.2.9-1.el9
rpm	python-asyncmy	0.2.9-7.el10_0
rpm	python3-asyncmy	0.2.10-1.el10_0
rpm	python3-asyncmy	0.2.10-1.el9
rpm	python3-asyncmy	0.2.11-12.el10_3
rpm	python3-asyncmy	0.2.11-2.el9
rpm	python3-asyncmy	0.2.5-3.el9
rpm	python3-asyncmy	0.2.5-6.el9
rpm	python3-asyncmy	0.2.9-1.el9
rpm	python3-asyncmy	0.2.9-7.el10_0
pypi	temp-asyncmy-dev-branch	0.2.6

CVE-2025-65896 | Components Impacted | Sonatype Guide | Sonatype Guide