github.com/jackc/pgproto3
View on Github
Activity
- Latest release
- 7y ago
- Total releases
- 2
- Cadence
- ~17 days
- Last 12 months
- 0
Reach
- Stars
- —
Details
- First release
- Mar 30, 2019
| Version | Released | |
|---|---|---|
v1.1.0
minor
1 CVE
CVE-2024-27304
GHSA-7jwh-3vrq-q3m8
GHSA-mrww-27vc-gghv
GO-2024-2606
Mar 04, 2024
pgproto3 SQL Injection via Protocol Message Size Overflow
High
Network
Low
None
None
ImpactSQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. PatchesThe problem is resolved in v2.3.3 WorkaroundsReject user input large enough to cause a single query or bind message to exceed 4 GB in size. Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev |
v1.1.0
minor
Dependencies (3)
|
|
v1.0.0
initial
1 CVE
CVE-2024-27304
GHSA-7jwh-3vrq-q3m8
GHSA-mrww-27vc-gghv
GO-2024-2606
Mar 04, 2024
pgproto3 SQL Injection via Protocol Message Size Overflow
High
Network
Low
None
None
ImpactSQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control. PatchesThe problem is resolved in v2.3.3 WorkaroundsReject user input large enough to cause a single query or bind message to exceed 4 GB in size. Fixed in
2.3.3
References
Updated Sep 10, 2026 · Source: OSV.dev |
v1.0.0
initial
Dependencies (3)
|