PT-2026-39553

Publicado

2026-04-30

·

Atualizado

2026-04-30

Descrição por

CVSS 4.0
2.7
Baixa
MétricasAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:U

Impact

Transactions were NOT committed despite the explicit options.WithCommit flag using table service client. Because of this, clients did not commit changes to the transaction, relying on the fact that the transaction commit was successful. This led (in rare cases) to a loss of data consistency.

Patches

ydb-go-sdk contains this problem in versions from v3.104.6 to v3.134.1. The fix for this problem has been released in version v3.134.2 (https://github.com/ydb-platform/ydb-go-sdk/pull/2091).

Workarounds

  1. Use explicit table.Transaction.CommitTx(ctx) instead use options.WithCommit().
  2. Use transaction retrier db.Table().DoTx(ctx, lambda) instead explicit start transaction on session.
  3. Use query client db.Query().Do(ctx, lambda) with the same logic in lambda

Resources

Explorabilidade
Correção
Fornecedores
Produtos afetados
Identificadores relacionados
GHSA-28XX-PPPM-VQFF
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾