Hi,
The following vulnerability was published for golang-gopkg-pg.v5.
CVE-2024-44905[0]:
| go-pg pg v10.13.0 was discovered to contain a SQL injection
| vulnerability via the component /types/append_value.go.
If you fix the vulnerability please also make sure to include the
CVE (Common Vulnerabilities & Exposures) id in your changelog entry.
For further information see:
[0] https://security-tracker.debian.org/tracker/CVE-2024-44905
https://www.cve.org/CVERecord?id=CVE-2024-44905
[1] https://github.com/go-pg/pg/commit/eff50a43724e52347559687a6945c116afbb41c1
Regards,
Salvatore