PyPI/pg-query CVE-2018-18482: medium 6.5, EPSS 1.16%

An issue was discovered in libpg_query 10-1.0.2. There is a memory leak in pg_query_raw_parse in pg_query_parse.c, which might lead to a denial of service.

Action: Upgrade pg-query to 0.28 or later.

pip install pg-query==0.28

Affected

introduced	fixed	last affected
0	0.28	-

Fixed versions

0.28

Sources

osv: PYSEC-2018-154
https://github.com/lfittl/libpg_query/issues/49

CVE-2018-18482 · published 2018-10-18T18:29:00Z · modified 2026-07-07T11:56:13.031518594Z · JSON