Skip to content

Commit 6993c65

Browse files
committed
new vulnerability in postgres-types
1 parent a72d35b commit 6993c65

File tree

1 file changed

+23
-12
lines changed

1 file changed

+23
-12
lines changed

input/new.json

Lines changed: 23 additions & 12 deletions
Original file line numberDiff line numberDiff line change
@@ -1,15 +1,26 @@
11
{
2-
"package_name": "",
3-
"patch_versions": [],
4-
"vulnerable_ranges": [],
5-
"cwe": [],
6-
"tldr": "",
7-
"doest_this_affect_me": "",
8-
"how_to_fix": "",
9-
"vulnerable_to": "",
2+
"package_name": "postgres-types",
3+
"patch_versions": [
4+
"0.2.9"
5+
],
6+
"vulnerable_ranges": [
7+
[
8+
"0.1.0",
9+
"0.2.8"
10+
]
11+
],
12+
"cwe": [
13+
"CWE-248",
14+
"CWE-400"
15+
],
16+
"tldr": "Affected versions of this package are vulnerable to uncaught exceptions. A panic occurs when attempting to retrieve a `PrimitiveDateTime` value in the `from_sql` function, if it is set to infinity. This issue can cause unexpected crashes, potential denial-of-service (DoS) conditions, or instability in applications relying on this functionality.",
17+
"doest_this_affect_me": "You are affected if you are using a version that falls within the vulnerable range.",
18+
"how_to_fix": "Upgrade the `postgres-types` library to the patch version.",
19+
"reporter": "",
20+
"vulnerable_to": "Uncaught Exception",
1021
"related_cve_id": "",
11-
"language": "",
12-
"severity_class": "",
13-
"aikido_score": 0,
14-
"changelog": ""
22+
"language": "RUST",
23+
"severity_class": "LOW",
24+
"aikido_score": 16,
25+
"changelog": "https://github.com/sfackler/rust-postgres/blob/master/postgres-types/CHANGELOG.md"
1526
}

0 commit comments

Comments
 (0)