Debian Golang-Github-Jackc-Pgproto3 vulnerabilities

1 known vulnerability affecting debian/golang-github-jackc-pgproto3.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2026-32286HIGHCVSS 7.5fixed in golang-github-jackc-pgproto3 2.3.3-2 (forky)2026

CVE-2026-32286 [HIGH] CVE-2026-32286: golang-github-jackc-pgproto3 - The DataRow.Decode function fails to properly validate field lengths. A maliciou... The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic. Scope: local bookworm: open forky: resolved (fixed in 2.3.3-2) sid: resolved (fixed in 2.3.3-2) trixie: open