Skip to content
OpenAdvisories

Vendor

ydb-platform

2 known vulnerabilities.

Products

ydb 1 ydb-go-sdk 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.9
    CVE-2026-24825

    a memory leak in ydb-platform/ydb with use of yajl_tree_parse function from src/yail module, which will cause out-of-memory in server and cause crash.

    Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb (contrib/libs/yajl modules). This vulnerability is associated with program files yail_tree.C. This issue affects ydb: through 24.4.4.2.

    ydb-platform ydb
  • Medium 5.5
    CVE-2023-45825

    Token in custom credentials object can leak through logs in ydb-go-sdk

    ydb-go-sdk is a pure Go native and database/sql driver for the YDB platform. Since ydb-go-sdk v3.48.6 if you use a custom credentials object (implementation of interface Credentials it may leak into logs. This happens because this object could be serialized i…

    ydb-platform ydb-go-sdk github.com/ydb-platform/ydb-go-sdk/v3 Go