PT-2026-137126

ProxySQL is a proxy for MySQL and its forks, as well as PostgreSQL. Prior to 3.0.10, 3.1.10, and 4.0.10, decompress mysql payload in lib/mysql data stream.cpp accepts a zlib stream when uncompress returns Z OK without checking that the actual output length equals the attacker-controlled payload...