Spectra Assure

failRisk: Vulnerabilities

Scanned:

psycopg2-binary

Artifact:

latest

psycopg2 - Python-PostgreSQL Database Adapter

License: unknown

Published:

SAFE Assessment

Compliance

Licenses

No license compliance issues

Secrets

No sensitive information found

Security

Vulnerabilities

1 severe vulnerabilities exploited

Hardening

9 misconfigured toolchains detected

Threats

Tampering

No evidence of software tampering

Malware

No evidence of malware inclusion

Did you know...

... that you can use ReversingLabs’ Spectra Assure platform to perform regular risk assessments of packages you develop in-house?

We recommend continuous software safeness monitoring through CI/CD integrations and pre-release/deployment checks. In addition to basic package information found on this page our platform offers rich reports for developers and DevSecOps that help them remediate all reported issues.

This website uses cookies to ensure the best website experience. By continuing to use this website you are giving your consent to cookies being used. Detailed information about our use of cookies is here.

List of known vulnerabilities affecting the software package and the components it embeds. Last refreshed on: 2026/03/16

All detected vulnerabilities are fixable

Run the update/upgrade command in your package manager to resolve the detected vulnerabilities

CVSS Score

CVE

Summary

Tags

critical

9.8

OpenSSL is vulnerable to a stack buffer overflow when parsing CMS AuthEnvelopedData messages with maliciously crafted AEAD parameters.

Exploits Exist

Fix Available

high

7.5

OpenSSL is vulnerable to a type confusion vulnerability in the TimeStamp Response verification code, potentially leading to a Denial of Service.

Fix Available

high

7.5

OpenSSL's PKCS12_item_decrypt_d2i_ex function can trigger a NULL pointer dereference when processing a malformed PKCS#12 file, leading to Denial of Service.

Fix Available

high

7.5

OpenSSL CMS implementation is vulnerable to out-of-bounds read and write when decrypting password-based encrypted messages.

Fix Available

high

7.4

OpenSSL's PKCS12_get_friendlyname function is vulnerable to a one-byte write before the allocated buffer when parsing maliciously crafted PKCS#12 files.

Fix Available

medium

6.1

OpenSSL is vulnerable to a stack-based buffer overflow, invalid pointer or NULL pointer dereference during MAC verification when parsing untrusted PKCS#12 files.

Fix Available

medium

5.9

OpenSSL's SSL_CIPHER_find function can cause a NULL pointer dereference, leading to Denial of Service.

Fix Available

medium

5.9

OpenSSL is vulnerable to a denial-of-service attack via TLS 1.3 certificate compression, allowing an attacker to cause large memory allocations.

Fix Available

medium

5.9

OpenSSL's HTTP client API functions may trigger an out-of-bounds read when handling IPv6 addresses in the 'no_proxy' environment variable.

Fix Available

medium

5.5

OpenSSL's 'openssl dgst' command-line tool silently truncates input data to 16MB when using one-shot signing algorithms.

Fix Available