CVE-2024-44906

Name of the Vulnerable Software and Affected Versions uptrace pgdriver version 1.2.1

Description The issue is related to a SQL injection vulnerability. It is caused by the appendArg function in /pgdriver/format.go.

Recommendations For uptrace pgdriver version 1.2.1, consider disabling the appendArg function as a temporary workaround until a patch is available. Restrict access to the /pgdriver/format.go module to minimize the risk of exploitation. Avoid using the vulnerable function until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.