What is GHSA-qhqw-rrw9-25rm?

GHSA-qhqw-rrw9-25rm is a security advisory published by GitHub Security Advisories with Critical severity. asyncmy is vulnerable to SQL injection via crafted dict keys

Which CVE IDs does GHSA-qhqw-rrw9-25rm cover?

GHSA-qhqw-rrw9-25rm covers the following CVE IDs: CVE-2025-65896. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-qhqw-rrw9-25rm?

GHSA-qhqw-rrw9-25rm has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

Which products are affected by GHSA-qhqw-rrw9-25rm?

GHSA-qhqw-rrw9-25rm affects 1 product, including: pip/asyncmy:\u003c= 0.2.11.

GHSA-qhqw-rrw9-25rmCriticalCVSS 9.8

asyncmy is vulnerable to SQL injection via crafted dict keys

Vendor

GitHub Security Advisories

Published

December 2, 2025

Last Modified

July 2, 2026

🔗 CVE IDs covered (1)

CVE-2025-65896 →

📋 Description

SQL injection vulnerability in long2ice asyncmy thru 0.2.11 allows attackers to execute arbitrary SQL commands via crafted dict keys.

🎯 Affected products1

pip/asyncmy:<= 0.2.11

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2025-65896
https://github.com/long2ice/asyncmy/issues/134
https://github.com/long2ice/asyncmy
https://github.com/advisories/GHSA-qhqw-rrw9-25rm