jackc güvenlik açıkları (CVE)

jackc için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

4 sonuç

2.3Düşük

CVE-2026-41889 6 ay önce

pgx: SQL Injection via placeholder confusion with dollar quoted string literals

jackc pgx

pgx is a PostgreSQL driver and toolkit for Go. Prior to version 5.9.2, SQL injection can occur when the non-default simple protocol is used, a dollar quoted string literal is used in the SQL query, that string literal contains text that would be would be inte…

9.8Kritik

CVE-2026-33816 7 ay önce

CVE-2026-33816 in github.com/jackc/pgx

github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3; Red Hat Cryostat 4 on RHEL 9; Red Hat Red Hat Enterprise Linux 10; Red Hat RHEM 1.0 for RHEL 9

Memory-safety vulnerability in github.com/jackc/pgx/v5.

9.8Kritik

CVE-2026-33815 7 ay önce

CVE-2026-33815 in github.com/jackc/pgx

github.com/jackc/pgx/v5 github.com/jackc/pgx/v5/pgproto3; Red Hat Cryostat 4 on RHEL 9; Red Hat RHEM 1.0 for RHEL 9; Red Hat RHEM 1.1 for RHEL 10

Memory-safety vulnerability in github.com/jackc/pgx/v5.

7.5Yüksek

CVE-2026-32286 7 ay önce

Denial of service in github.com/jackc/pgproto3/v2

github.com/jackc/pgproto3/v2 github.com/jackc/pgproto3/v2; Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 9; Red Hat Multicluster Global Hub 1.3.4

The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.