Lucene search
K

13 matches found

Positive Technologies
Positive Technologies
added 2026/05/20 12:0 a.m.6 views

PT-2026-42373

ydb-go-sdk's transactions are not committed using the options.WithCommit option on last call table.Transaction.Execute in transaction in github.com/ydb-platform/ydb-go-sdk...

5.8AI score
Exploits0References8
Tenable Nessus
Tenable Nessus
added 2026/02/02 12:0 a.m.5 views

Linux Distros Unpatched Vulnerability : CVE-2026-24825

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb contrib/libs/yajl modules. This vulnerability is associated with program...

6.9CVSS5.9AI score0.00082EPSS
Exploits0References2
OSV
OSV
added 2026/01/27 9:15 a.m.1 views

CVE-2026-24825

Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb contrib/libs/yajl modules. This vulnerability is associated with program files yailtree.C. This issue affects ydb: through 24.4.4.2...

6.9CVSS5.9AI score
Exploits0References1
NVD
NVD
added 2026/01/27 9:15 a.m.4 views

CVE-2026-24825

Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb contrib/libs/yajl modules. This vulnerability is associated with program files yailtree.C. This issue affects ydb: through 24.4.4.2...

6.9CVSS0.00082EPSS
Exploits0References1
CVE
CVE
added 2026/01/27 9:2 a.m.8 views

CVE-2026-24825

CVE-2026-24825 describes a memory-leak issue in the ydb-platform/ydb stack, linked to the contrib/libs/yajl modules (yail_tree.C). Affected are ydb versions up to 24.4.4.2. The vulnerability is characterized as Missing Release of Memory after Effective Lifetime, with impact described as potential...

6.9CVSS5.9AI score0.00082EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/27 9:2 a.m.2 views

CVE-2026-24825 a memory leak in ydb-platform/ydb with use of yajl_tree_parse function from src/yail module, which will cause out-of-memory in server and cause crash.

Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb contrib/libs/yajl modules. This vulnerability is associated with program files yailtree.C. This issue affects ydb: through 24.4.4.2...

6.9CVSS5.9AI score0.00082EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/27 9:2 a.m.2 views

CVE-2026-24825

Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb contrib/libs/yajl modules. This vulnerability is associated with program files yailtree.C. This issue affects ydb: through 24.4.4.2...

6.9CVSS5.9AI score0.00082EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/01/27 9:2 a.m.26 views

CVE-2026-24825 a memory leak in ydb-platform/ydb with use of yajl_tree_parse function from src/yail module, which will cause out-of-memory in server and cause crash.

Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb contrib/libs/yajl modules. This vulnerability is associated with program files yailtree.C. This issue affects ydb: through 24.4.4.2...

6.9CVSS0.00082EPSS
Exploits0References1
EUVD
EUVD
added 2026/01/27 9:2 a.m.1 views

EUVD-2026-4806

Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb contrib/libs/yajl modules. This vulnerability is associated with program files yailtree.C. This issue affects ydb: through 24.4.4.2...

6.9CVSS5.9AI score0.00082EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/27 12:0 a.m.5 views

PT-2026-4900

Missing Release of Memory after Effective Lifetime vulnerability in ydb-platform ydb contrib/libs/yajl modules. This vulnerability is associated with program files yail tree.C. This issue affects ydb: through 24.4.4.2...

6.9CVSS5.9AI score0.00082EPSS
Exploits0References2
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2023-2791

Malicious code in bioql PyPI...

5.5CVSS5.5AI score0.00134EPSS
Exploits0References7
RedhatCVE
RedhatCVE
added 2025/05/23 2:25 a.m.4 views

CVE-2023-45825

ydb-go-sdk is a pure Go native and database/sql driver for the YDB platform. Since ydb-go-sdk v3.48.6 if you use a custom credentials object implementation of interface Credentials it may leak into logs. This happens because this object could be serialized into an error message using...

5.5CVSS6.2AI score0.00134EPSS
Exploits0References1
CVE
CVE
added 2023/10/19 6:22 p.m.49 views

CVE-2023-45825

CVEs and affected software: The issue affects ydb-go-sdk (Go native and database/sql driver for YDB) in versions from v3.48.6 up to v3.53.2. Root cause and impact: If a custom credentials object (implementing the Credentials interface) is logged via an error message, the object could be serialize...

5.5CVSS5.1AI score0.00134EPSS
Exploits0References4Affected Software1
Rows per page
Query Builder