Pgproto3 (Jackc) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 21 known versions, newest CVE from 2026-03-26. Vendor: Jackc.

CVEs of Pgproto3

• CVE-2026-32286 - CVSS 7.5 (high), 2026-03-26: The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative…
• CVE-2024-27304 - CVSS 9.8 (critical), 2024-03-06: pgx is a PostgreSQL driver and toolkit for Go. SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An…