Go/github.com/jackc/pgx/v4 CVE-2024-27304: unknown, EPSS 1.11%
SQL injection in github.com/jackc/pgproto3 and github.com/jackc/pgx
Action: Upgrade github.com/jackc/pgx/v4 to 4.18.2 or later.
go get github.com/jackc/pgx/v4@v4.18.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.18.2 | - |
Fixed versions
| 4.18.2 |
Sources
- osv: GO-2024-2606#Go/github.com/jackc/pgx/v4
- https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv
- https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007
- https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4
- https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8
- https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81df
CVE-2024-27304 · published · modified · JSON