npgsql vulnerabilities

1 known vulnerability in npgsql from Npgsql. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  npgsql: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-32655May 14, 2024NpgsqlEPSS 1.72%

  Npgsql is the .NET data provider for PostgreSQL. The `WriteBind()` method in `src/Npgsql/Internal/NpgsqlConnector.FrontendMessages.cs` uses `int` variables to store the message length and the sum of parameter lengths. Both variables overflow when the sum of pa