Product

uptrace github.com/uptrace/bun/driver/pgdriver vulnerabilities

1 published CVE affecting uptrace github.com/uptrace/bun/driver/pgdriver, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 0
Medium: 1
Low: 0
Unscored: 0
CISA KEV: 0

Latest uptrace github.com/uptrace/bun/driver/pgdriver CVEs

Newest publication first

CVE-2024-44906 uptrace pgdriver SQL injection vulnerability
Published 2025-06-12

MediumCVSS 6.5 EPSS 0.41%

uptrace pgdriver v1.2.1 was discovered to contain a SQL injection vulnerability via the appendArg function in /pgdriver/format.go. The maintainer has stated that the issue is fixed in v1.2.15.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

uptrace github.com/uptrace/bun/driver/pgdriver vulnerabilities

Latest uptrace github.com/uptrace/bun/driver/pgdriver CVEs

CVE-2024-44906 uptrace pgdriver SQL injection vulnerability