Skip to content
OpenAdvisories

Package · Go

github.com/pingcap/tidb

3 known vulnerabilities.

3 results · Feed

  • Medium 5.4

    PingCAP TiDB nil pointer dereference

    A nil pointer dereference in PingCAP TiDB v8.2.0-alpha-216-gfe5858b allows attackers to crash the application via expression.inferCollation.

  • Medium 4.2

    Use of Externally-Controlled Format String in pingcap/tidb

    Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.

  • High 7.8

    TiDB authentication bypass vulnerability

    TiDB is an open-source NewSQL database that supports Hybrid Transactional and Analytical Processing (HTAP) workloads. Under certain conditions, an attacker can construct malicious authentication requests to bypass the authentication process, resulting in priv…