github.com/jackc/pgproto3/v2

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

High 7.5

CVE-2026-32286 Public exploit

Denial of service in github.com/jackc/pgproto3/v2

The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.

github.com/jackc/pgproto3/v2 github.com/jackc/pgproto3/v2 golang-github-jackc-pgproto3 github.com/jackc/pgproto3/v2 Debian Ubuntu Go

Mar 26, 2026
Critical 9.8

CVE-2024-27304 Public exploit

pgx SQL Injection via Protocol Message Size Overflow

pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple me…

jackc pgx github.com/jackc/pgx/v5 github.com/jackc/pgx/v4 Debian Ubuntu Go

Mar 6, 2024