Skip to content
OpenAdvisories

Package · crates.io

postgres-protocol

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    postgres-protocol: Panic decoding a malformed `hstore` value allows denial of service

    A malicious or compromised server can return a binary `hstore` value with an invalid internal length field, causing the client to panic while decoding it. Applications that connect only to a trusted database are not exposed; the risk applies to clients that m…