Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:golang/github.com/uptrace/bun/driver/pgdriver@1.2.15
purl pkg:golang/github.com/uptrace/bun/driver/pgdriver@1.2.15
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-syfn-e5j8-b7e8 uptrace pgdriver v1.2.1 was discovered to contain a SQL injection vulnerability via the appendArg function in /pgdriver/format.go. The maintainer has stated that the issue is fixed in v1.2.15. CVE-2024-44906
GHSA-h4h6-vccr-44h2

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-12T07:55:24.640838+00:00 GithubOSV Importer Fixing VCID-syfn-e5j8-b7e8 https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2025/06/GHSA-h4h6-vccr-44h2/GHSA-h4h6-vccr-44h2.json 38.6.0