Skip to content
OpenAdvisories

Package · Go

github.com/ydb-platform/ydb-go-sdk/v3

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Low —
    GHSA-28xx-pppm-vqff

    ydb-go-sdk's transactions are not committed using the `options.WithCommit()` option on last call `table.Transaction.Execute` in transaction

    ### Impact Transactions were NOT committed despite the explicit `options.WithCommit` flag using table service client. Because of this, clients did not commit changes to the transaction, relying on the fact that the transaction commit was successful. This led …

    github.com/ydb-platform/ydb-go-sdk/v3 Go
  • Medium 5.5
    CVE-2023-45825

    Token in custom credentials object can leak through logs in ydb-go-sdk

    ydb-go-sdk is a pure Go native and database/sql driver for the YDB platform. Since ydb-go-sdk v3.48.6 if you use a custom credentials object (implementation of interface Credentials it may leak into logs. This happens because this object could be serialized i…

    ydb-platform ydb-go-sdk github.com/ydb-platform/ydb-go-sdk/v3 Go