Github.com/jackc/pgproto3/v2 vulnerabilities
We track 1 vulnerability in Github.com/jackc/pgproto3/v2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on March 26, 2026.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Github.com/jackc/pgproto3/v2 vulnerabilities
- 7.5 High severity
github.com/jackc/pgproto3/v2: Improper Validation of Array Index
The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.