Upgrading asyncpg 0.20 to 0.21
Safe0.20.1 → 0.21.0Security1New2Fixed2Other6
SecurityFixes possible uninitialized pointer access on unexpected array message data (CVE-2020-17446).GHSA-2xpj-f5g2-8p7m · CVE-2020-17446 ↗
SafeUpgrade verdict
A security fix. Nothing to change in your code.
In plain terms
- A malformed or unexpected array message from the server could cause the driver to read uninitialized memory. Upgrading fixes this.
Must act 1 item needs code or config changes
What you must change
Security1
Fixes possible uninitialized pointer access on unexpected array message data (CVE-2020-17446).