Ran
|
Files
114
|
Run time
4s
|
Badge
Embed ▾
README BADGES
|
push
github
chore(deps): bump github.com/jackc/pgx/v4 from 4.17.2 to 4.18.2 (#1479) Bumps [github.com/jackc/pgx/v4](https://github.com/jackc/pgx) from 4.17.2 to 4.18.2. <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/jackc/pgx/blob/v4.18.2/CHANGELOG.md">github.com/jackc/pgx/v4's changelog</a>.</em></p> <blockquote> <h1>4.18.2 (March 4, 2024)</h1> <p>Fix CVE-2024-27289</p> <p>SQL injection can occur when all of the following conditions are met:</p> <ol> <li>The non-default simple protocol is used.</li> <li>A placeholder for a numeric value must be immediately preceded by a minus.</li> <li>There must be a second placeholder for a string value after the first placeholder; both must be on the same line.</li> <li>Both parameter values must be user-controlled.</li> </ol> <p>Thanks to Paul Gerste for reporting this issue.</p> <p>Fix CVE-2024-27304</p> <p>SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control.</p> <p>Thanks to Paul Gerste for reporting this issue.</p> <ul> <li>Fix *dbTx.Exec not checking if it is already closed</li> </ul> <h1>4.18.1 (February 27, 2023)</h1> <ul> <li>Fix: Support pgx v4 and v5 stdlib in same program (Tomáš Procházka)</li> </ul> <h1>4.18.0 (February 11, 2023)</h1> <ul> <li>Upgrade pgconn to v1.14.0</li> <li>Upgrade pgproto3 to v2.3.2</li> <li>Upgrade pgtype to v1.14.0</li> <li>Fix query sanitizer when query text contains Unicode replacement character</li> <li>Fix context with value in BeforeConnect (David Harju)</li> <li>Support pgx v4 and v5 stdlib in same program (Vitalii Solodilov)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/jackc/pgx/commit/14690df4c"><code>14... (continued)
7818 of 11983 relevant lines covered (65.24%)
59.97 hits per line
Coverage | ∆ | File | Lines | Relevant | Covered | Missed | Hits/Line |
---|