https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-02T14:36:10.663367+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-32286 CVE-2026-32286 — Denial of service in github.com/jackc/pgproto3/v2 2026-10-02T14:36:10.872314+00:00

Affected: github.com/jackc/pgproto3/v2, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Multicluster Global Hub 1.3.4, Red Hat Multicluster Global Hub 1.4.5, Red Hat Multicluster Global Hub 1.6.5, Red Hat Advanced Cluster Security 4.8, Red Hat multicluster global hub 1.5.3, Red Hat Quay 3.10, Red Hat Quay 3.12 and 18 more

The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.