ydb-go-sdk's transactions are not committed using the `options.WithCommit()` option on last call `table.Transaction.Execute` in transaction in github.com/ydb-platform/ydb-go-sdk

概要

参考情報

• ydb-platform/ydb-go-sdk security advisory · ADVISORY
• ydb-platform/ydb-go-sdk commit 251128a · WEB
• ydb-platform/ydb-go-sdk commit 25dcff4 · WEB
• ydb-platform/ydb-go-sdk#2091 · WEB
• ydb-platform/ydb-go-sdk release v3.104.6 · WEB
• ydb-platform/ydb-go-sdk release v3.134.1 · WEB
• ydb-platform/ydb-go-sdk release v3.134.2 · WEB

github.com/ydb-platform/ydb-go-sdk/v3 のその他の脆弱性

• GHSA-28xx-pppm-vqff低ydb-go-sdk's transactions are not committed using the `options.WithCommit()` option on last call `table.Transaction.Execute` in transaction
• CVE-2023-45825中 5.5ydb-go-sdk is a pure Go native and database/sql driver for the YDB platform. Since ydb-go-sdk v3.48.6 if you use a custom credentials object…