GHSA-h4h6-vccr-44h2

GitHub Security Advisory

uptrace pgdriver SQL injection vulnerability

✓ GitHub Reviewed MODERATE Has CVE

uptrace pgdriver v1.2.1 was discovered to contain a SQL injection vulnerability via the appendArg function in /pgdriver/format.go.

Go github.com/uptrace/bun

Affected versions: 0 (last affected: 1.2.14)

CVE-2024-44906

GHSA ID

GHSA-h4h6-vccr-44h2

Published

June 12, 2025 6:31 PM

Last Modified

June 17, 2025 10:33 PM

CVSS Score

5.0 /10

Primary Ecosystem

Primary Package

github.com/uptrace/bun

GitHub Reviewed

✓ Yes

Last updated: June 18, 2025 6:25 AM

Data from GitHub Advisory Database. This information is provided for research and educational purposes.