github.com/jackc/pgproto3/v2
Go2 known CVEs affecting this package
Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.
CVEs affecting github.com/jackc/pgproto3/v2page 1 of 1
- CVE-2024-27304CRITICALCVSS 9.8EG 9.8✓ Fixed in 2.3.32024-03-06
pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be…
- CVE-2026-32286HIGHCVSS 7.5EG 7.52026-03-26
The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.
Check whether github.com/jackc/pgproto3/v2 is used in your infrastructure
EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for github.com/jackc/pgproto3/v2 CVEs against the assets you own.
Start Free Scan →