PyPI/pg-query CVE-2018-18482: medium 6.5, EPSS 1.16%

libpg_query memory leak

Action: Upgrade pg-query to 0.28 or later.

pip install pg-query==0.28

Affected

Fixed versions

Sources

• osv: GHSA-vm3q-58wm-2r2x
• https://nvd.nist.gov/vuln/detail/CVE-2018-18482
• https://github.com/lfittl/libpg_query/issues/49
• https://github.com/lelit/pglast
• https://github.com/pypa/advisory-database/tree/main/vulns/pg-query/PYSEC-2018-154.yaml

CVE-2018-18482 · published 2022-05-13T01:50:42Z · modified 2026-07-07T11:56:13.031518594Z · JSON