Skip to content
OpenAdvisories
Medium · 4.2 CVE-2022-3023 EUVD-2022-7269GHSA-7fxj-fr3v-r9gj

Use of Externally-Controlled Format String in pingcap/tidb

Published Nov 4, 2022 · Updated May 2, 2025 · Assigned by @huntrdev

Vendor: pingcap Product: pingcap/tidb Package: github.com/pingcap/tidb Ecosystem: Go

Description

Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.

Affected products

VendorProductAffectedFixed
pingcap pingcap/tidb unspecified – < 6.4.0, 6.1.3 6.4.0, 6.1.3

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/pingcap/tidb <= 6.1.2 — GHSA-7fxj-fr3v-r9gj
Go github.com/pingcap/tidb >= 6.2.0, <= 6.4.0-alpha1 — GHSA-7fxj-fr3v-r9gj

References