Go/github.com/jackc/pgx/v5 CVE-2024-27304: unknown, EPSS 1.11%
SQL injection in github.com/jackc/pgproto3 and github.com/jackc/pgx
Action: Upgrade github.com/jackc/pgx/v5 to 5.5.4 or later.
go get github.com/jackc/pgx/v5@v5.5.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 5.0.0 | 5.5.4 | - |
Fixed versions
| 5.5.4 |
Sources
- osv: GO-2024-2606#Go/github.com/jackc/pgx/v5
- https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv
- https://github.com/jackc/pgproto3/commit/945c2126f6db8f3bea7eeebe307c01fe92bca007
- https://github.com/jackc/pgx/commit/adbb38f298c76e283ffc7c7a3f571036fea47fd4
- https://github.com/jackc/pgx/commit/c543134753a0c5d22881c12404025724cb05ffd8
- https://github.com/jackc/pgx/commit/f94eb0e2f96782042c96801b5ac448f44f0a81df
CVE-2024-27304 · published · modified · JSON