Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2026-32286 1 Jackc 1 Pgproto3 2026-06-03 7.5 High
The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.
CVE-2026-33816 1 Jackc 1 Pgx 2026-05-21 9.8 Critical
Memory-safety vulnerability in github.com/jackc/pgx/v5.
CVE-2026-33815 1 Jackc 1 Pgx 2026-05-21 9.8 Critical
Memory-safety vulnerability in github.com/jackc/pgx/v5.