| Package | Affected versions | Patched versions |
|---|---|---|
| github.com/jackc/pgproto3/v2 | ≥ 2.0.0, ≤ 2.3.3≥ 2.0.0 | |
| pgproto3 | ≥ 2.0.0, ≤ 2.3.3 |
The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free