github.com/jackc/pgproto3/v2

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

High 7.5

CVE-2026-32286 Public exploit

Denial of service in github.com/jackc/pgproto3/v2

The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.

github.com/jackc/pgproto3/v2 github.com/jackc/pgproto3/v2 golang-github-jackc-pgproto3 github.com/jackc/pgproto3/v2 Debian Ubuntu Go

Mar 26, 2026