Npgsql vulnerabilities
We track 1 vulnerability in Npgsql products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2024.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Npgsql vulnerabilities
- 8.1 High severity
npgsql: Improper Neutralization of Special Elements used in an SQL Command
Npgsql is the .NET data provider for PostgreSQL. The `WriteBind()` method in `src/Npgsql/Internal/NpgsqlConnector.FrontendMessages.cs` uses `int` variables to store the message length and the sum of parameter lengths. Both variables overflow when the sum of pa