Go/github.com/jackc/pgproto3/v2 CVE-2024-27304: unknown, EPSS 1.11%
SQL injection in github.com/jackc/pgproto3 and github.com/jackc/pgx
Action: Upgrade github.com/jackc/pgproto3/v2 to 2.3.3 or later.
go get github.com/jackc/pgproto3/v2@v2.3.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.3.3 | - |
Fixed versions
| 2.3.3 |
Sources
- osv: GO-2024-2606
- https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv
- https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007
- https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4
- https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8
- https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81df
CVE-2024-27304 · published · modified · JSON