github.com/lib/pq vulnerabilities
CVEs whose affected-version data names the github.com/lib/pq package (go). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
7 CVEsRSS
CVE-2026-56874NonePre-protocol error reader permits unbounded memory consumption in github.com/lib/pq
Pre-protocol error reader permits unbounded memory consumption in github.com/lib/pq
▾ Sunlitlib · github.com/lib/pqvia OSV
CVE-2026-56873NoneBackend frame lengths cause pre-validation memory exhaustion in github.com/lib/pq
Backend frame lengths cause pre-validation memory exhaustion in github.com/lib/pq
▾ Sunlitlib · github.com/lib/pqvia OSV
CVE-2026-56872NoneMalformed RowDescription and DataRow messages cause panics in github.com/lib/pq
Malformed RowDescription and DataRow messages cause panics in github.com/lib/pq
▾ Sunlitlib · github.com/lib/pqvia OSV
CVE-2026-56871NoneMalformed backend frame length causes panic in github.com/lib/pq
Malformed backend frame length causes panic in github.com/lib/pq
▾ Sunlitlib · github.com/lib/pqvia OSV
CVE-2026-56870NoneDisclosure of wrong .pgpass credential via hostaddr in github.com/lib/pq
Disclosure of wrong .pgpass credential via hostaddr in github.com/lib/pq
▾ Sunlitlib · github.com/lib/pqvia OSV
CVE-2026-56869NoneUnbounded iteration count causes CPU denial of service in github.com/lib/pq/scram
Unbounded iteration count causes CPU denial of service in github.com/lib/pq/scram
▾ Sunlitlib · github.com/lib/pqvia OSV
CVE-2026-56868NoneGSS authentication completes without mutual proof in github.com/lib/pq
GSS authentication completes without mutual proof in github.com/lib/pq
▾ Sunlitlib · github.com/lib/pqvia OSV