github.com/jackc/pgproto3/v2 vulnerabilities (CVE)

CVE records published for github.com/jackc/pgproto3/v2, newest first. Follow to get an email when a new one appears.

1 results
7.5High
CVE-2026-32286

Denial of service in github.com/jackc/pgproto3/v2

github.com/jackc/pgproto3/v2 github.com/jackc/pgproto3/v2; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 9; Red Hat Multicluster Global Hub 1.3.4

The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.