postgres-protocol vulnerabilities
CVEs whose affected-version data names the postgres-protocol package (rust). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
4 CVEsRSS
GHSA-5x78-73v4-xg6wHighpostgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service
postgres-protocol: Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service
▾ Twilightpostgres-protocol · postgres-protocolvia GHSA
GHSA-rgqc-3x5p-6gwgMediumpostgres-protocol: Panic decoding a malformed `hstore` value allows denial of service
postgres-protocol: Panic decoding a malformed `hstore` value allows denial of service
▾ Sunlitpostgres-protocol · postgres-protocolvia GHSA
RUSTSEC-2026-0180NonePanic decoding a malformed `hstore` value allows denial of service
Panic decoding a malformed `hstore` value allows denial of service
▾ Sunlitpostgres-protocol · postgres-protocolvia OSV
RUSTSEC-2026-0179NoneUnbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service
Unbounded SCRAM iteration count allows a malicious server to cause CPU-exhaustion denial of service
▾ Sunlitpostgres-protocol · postgres-protocolvia OSV