Go/github.com/ydb-platform/ydb-go-sdk/v3: low
ydb-go-sdk's transactions are not committed using the `options.WithCommit()` option on last call `table.Transaction.Execute` in transaction
Action: Upgrade github.com/ydb-platform/ydb-go-sdk/v3 to 3.134.2 or later.
go get github.com/ydb-platform/ydb-go-sdk/v3@v3.134.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.104.6 | 3.134.2 | - |
Fixed versions
| 3.134.2 |
Sources
- osv: GHSA-28xx-pppm-vqff
- https://github.com/ydb-platform/ydb-go-sdk/security/advisories/GHSA-28xx-pppm-vqff
- https://github.com/ydb-platform/ydb-go-sdk/pull/2091
- https://github.com/ydb-platform/ydb-go-sdk/commit/251128a64763555d9a79ee7a131dd154c9000eb9
- https://github.com/ydb-platform/ydb-go-sdk/commit/25dcff4c41153f1f9413512ba12999b40bf7154d
- https://github.com/ydb-platform/ydb-go-sdk
- https://github.com/ydb-platform/ydb-go-sdk/releases/tag/v3.104.6
- https://github.com/ydb-platform/ydb-go-sdk/releases/tag/v3.134.1
- https://github.com/ydb-platform/ydb-go-sdk/releases/tag/v3.134.2
published · modified · JSON