Skip to content
OpenAdvisories

Package · Ubuntu

golang-github-jackc-pgproto3

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-32286 Public exploit

    Denial of service in github.com/jackc/pgproto3/v2

    The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.

    github.com/jackc/pgproto3/v2 github.com/jackc/pgproto3/v2 kots grafana-alloy Debian Ubuntu Wolfi Go
  • Critical 9.8
    CVE-2024-27304 Public exploit

    pgx SQL Injection via Protocol Message Size Overflow

    pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple me…

    jackc pgx kots k3s Debian Ubuntu Azure Linux Wolfi Go