Skip to content
OpenAdvisories

Package · Ubuntu

npgsql

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    CVE-2024-32655

    Npgsql Vulnerable to SQL Injection via Protocol Message Size Overflow

    Npgsql is the .NET data provider for PostgreSQL. The `WriteBind()` method in `src/Npgsql/Internal/NpgsqlConnector.FrontendMessages.cs` uses `int` variables to store the message length and the sum of parameter lengths. Both variables overflow when the sum of p…

    npgsql npgsql Npgsql npgsql Ubuntu NuGet