← Database

CVE-2024-44906

MEDIUM CVSS: 6.5 Published: 2025-06-12 Modified: 2026-06-17

Description

uptrace pgdriver v1.2.1 was discovered to contain a SQL injection vulnerability via the appendArg function in /pgdriver/format.go. The maintainer has stated that the issue is fixed in v1.2.15.

Affected Platforms

Uptrace Pgdriver

Weakness Type

CWE-89

References