CVE-2022-3023
Use of Externally-Controlled Format String in pingcap/tidb
Summary
Use of Externally-Controlled Format String in pingcap/tidb
Original description
The description as published by the source.
Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Go
github.com/pingcap/tidb
[{"type":"SEMVER","events":[{"introduced":"6.2.0"},{"last_affected":"6.4.0-alpha1"}]}]
References
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com
- web advisory.dw1.io
- web huntr.dev