THREATOPS
THREAT OPSThreat News › [GHSA] GHSA-3gjw-f78c-vvpw (medium) — tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service

[GHSA] GHSA-3gjw-f78c-vvpw (medium) — tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service

medgithub_advisoriesPublished 2026-08-24

GHSA-3gjw-f78c-vvpw Severity: medium CVE: None

tokio-postgres: Panic on a `DataRow` with fewer fields than columns allows denial of service

A malicious or compromised server can send a row containing fewer fields than its row description declares columns. Reading one of the missing columns then panics with an out-of-bounds index, aborting the calling task. This affects even the otherwise non-pan

Original source: https://github.com/advisories/GHSA-3gjw-f78c-vvpw