{
    "dataType": "CVE_RECORD",
    "dataVersion": "5.2",
    "cveMetadata": {
        "cveId": "CVE-2026-32286",
        "assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
        "state": "PUBLISHED",
        "assignerShortName": "Go",
        "dateReserved": "2026-03-11T16:38:46.556Z",
        "datePublished": "2026-03-26T19:40:51.974Z",
        "dateUpdated": "2026-08-24T12:07:02.338Z"
    },
    "containers": {
        "cna": {
            "providerMetadata": {
                "orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
                "shortName": "Go",
                "dateUpdated": "2026-04-02T19:08:53.981Z"
            },
            "title": "Denial of service in github.com/jackc/pgproto3/v2",
            "descriptions": [
                {
                    "lang": "en",
                    "value": "The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic."
                }
            ],
            "affected": [
                {
                    "vendor": "github.com/jackc/pgproto3/v2",
                    "product": "github.com/jackc/pgproto3/v2",
                    "collectionURL": "https://pkg.go.dev",
                    "packageName": "github.com/jackc/pgproto3/v2",
                    "versions": [
                        {
                            "version": "0",
                            "lessThan": "2.0.0",
                            "status": "unaffected",
                            "versionType": "semver"
                        }
                    ],
                    "programRoutines": [
                        {
                            "name": "DataRow.Decode"
                        },
                        {
                            "name": "Frontend.Receive"
                        }
                    ],
                    "defaultStatus": "affected"
                }
            ],
            "problemTypes": [
                {
                    "descriptions": [
                        {
                            "lang": "en",
                            "description": "CWE-125: Out-of-bounds Read"
                        }
                    ]
                }
            ],
            "references": [
                {
                    "url": "https://github.com/advisories/GHSA-jqcq-xjh3-6g23"
                },
                {
                    "url": "https://github.com/jackc/pgx/issues/2507"
                },
                {
                    "url": "https://github.com/golang/vulndb/issues/4518"
                },
                {
                    "url": "https://pkg.go.dev/vuln/GO-2026-4518"
                }
            ]
        },
        "adp": [
            {
                "references": [
                    {
                        "url": "https://securityinfinity.com/research/memory-safety-vulnerabilities-in-go-postgresql-wire-protocol-parsers-pgproto3-pgx",
                        "tags": [
                            "exploit"
                        ]
                    }
                ],
                "metrics": [
                    {
                        "cvssV3_1": {
                            "scope": "UNCHANGED",
                            "version": "3.1",
                            "baseScore": 7.5,
                            "attackVector": "NETWORK",
                            "baseSeverity": "HIGH",
                            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                            "integrityImpact": "NONE",
                            "userInteraction": "NONE",
                            "attackComplexity": "LOW",
                            "availabilityImpact": "HIGH",
                            "privilegesRequired": "NONE",
                            "confidentialityImpact": "NONE"
                        }
                    },
                    {
                        "other": {
                            "type": "ssvc",
                            "content": {
                                "timestamp": "2026-03-30T14:08:15.986882Z",
                                "id": "CVE-2026-32286",
                                "options": [
                                    {
                                        "Exploitation": "poc"
                                    },
                                    {
                                        "Automatable": "yes"
                                    },
                                    {
                                        "Technical Impact": "partial"
                                    }
                                ],
                                "role": "CISA Coordinator",
                                "version": "2.0.3"
                            }
                        }
                    }
                ],
                "title": "CISA ADP Vulnrichment",
                "providerMetadata": {
                    "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
                    "shortName": "CISA-ADP",
                    "dateUpdated": "2026-03-30T14:55:11.942Z"
                }
            },
            {
                "affected": [
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/o:redhat:enterprise_linux:10.2"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "osbuild-composer",
                        "product": "Red Hat Enterprise Linux 10",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "0:165.1-2.el10_2",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:enterprise_linux:9"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "osbuild-composer",
                        "product": "Red Hat Enterprise Linux 9",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "0:165.1-2.el9_8",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_globalhub:1.3::el9"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
                        "product": "Multicluster Global Hub 1.3.4",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1779210675",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_globalhub:1.3::el9"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-globalhub/multicluster-globalhub-manager-rhel9",
                        "product": "Multicluster Global Hub 1.3.4",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1779210608",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_globalhub:1.3::el9"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-globalhub/multicluster-globalhub-rhel9-operator",
                        "product": "Multicluster Global Hub 1.3.4",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1779209992",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_globalhub:1.5::el9"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
                        "product": "Multicluster Global Hub 1.5.6",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1778867753",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:advanced_cluster_security:4.8::el8"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "advanced-cluster-security/rhacs-main-rhel8",
                        "product": "Red Hat Advanced Cluster Security 4.8",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1777307791",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:advanced_cluster_security:4.8::el8"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "advanced-cluster-security/rhacs-scanner-v4-rhel8",
                        "product": "Red Hat Advanced Cluster Security 4.8",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1777307791",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_globalhub:1.4::el9"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
                        "product": "Red Hat multicluster global hub 1.4.2",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1779579439",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_globalhub:1.6::el9"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-globalhub/multicluster-globalhub-grafana-rhel9",
                        "product": "Red Hat multicluster global hub 1.6.0",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1780167118",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:quay:3.10::el8"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "quay/quay-rhel8",
                        "product": "Red Hat Quay 3.1",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1776736910",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:quay:3.12::el8"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "quay/quay-rhel8",
                        "product": "Red Hat Quay 3.12",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1776752646",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:quay:3.14::el8"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "quay/quay-rhel8",
                        "product": "Red Hat Quay 3.14",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1779689392",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:quay:3.15::el8"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "quay/quay-rhel8",
                        "product": "Red Hat Quay 3.15",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1780891395",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:quay:3.16::el9"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "quay/quay-rhel9",
                        "product": "Red Hat Quay 3.16",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1779204086",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:quay:3.17::el9"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "quay/quay-rhel9",
                        "product": "Red Hat Quay 3.17",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1779922205",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://catalog.redhat.com/software/containers/",
                        "cpes": [
                            "cpe:/a:redhat:quay:3.9::el8"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "quay/quay-rhel8",
                        "product": "Red Hat Quay 3.9",
                        "vendor": "Red Hat",
                        "versions": [
                            {
                                "lessThan": "*",
                                "status": "unaffected",
                                "version": "1776782369",
                                "versionType": "rpm"
                            }
                        ]
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:assisted_installer:2"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "rhai/assisted-installer-controller-rhel9",
                        "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:assisted_installer:2"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "rhai/assisted-installer-rhel9",
                        "product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_engine"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-engine/assisted-installer-agent-rhel8",
                        "product": "Multicluster Engine for Kubernetes",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_engine"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-engine/assisted-installer-agent-rhel9",
                        "product": "Multicluster Engine for Kubernetes",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_engine"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-engine/assisted-installer-controller-rhel8",
                        "product": "Multicluster Engine for Kubernetes",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_engine"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-engine/assisted-installer-controller-rhel9",
                        "product": "Multicluster Engine for Kubernetes",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_engine"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-engine/assisted-installer-rhel8",
                        "product": "Multicluster Engine for Kubernetes",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_engine"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-engine/assisted-installer-rhel9",
                        "product": "Multicluster Engine for Kubernetes",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_engine"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-engine/assisted-service-8-rhel8",
                        "product": "Multicluster Engine for Kubernetes",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_engine"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-engine/assisted-service-9-rhel9",
                        "product": "Multicluster Engine for Kubernetes",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_engine"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "multicluster-engine/cluster-api-provider-aws-rhel9",
                        "product": "Multicluster Engine for Kubernetes",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:multicluster_globalhub"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "multicluster-globalhub/multicluster-globalhub-operator-bundle",
                        "product": "Multicluster Global Hub",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:acm:2"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "rhacm2/acm-search-indexer-rhel9",
                        "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:acm:2"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "rhacm2/acm-search-v2-api-rhel9",
                        "product": "Red Hat Advanced Cluster Management for Kubernetes 2",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:advanced_cluster_security:4"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "advanced-cluster-security/rhacs-rhel8-operator",
                        "product": "Red Hat Advanced Cluster Security 4",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:advanced_cluster_security:4"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "advanced-cluster-security/rhacs-roxctl-rhel8",
                        "product": "Red Hat Advanced Cluster Security 4",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/o:redhat:enterprise_linux:8"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "osbuild-composer",
                        "product": "Red Hat Enterprise Linux 8",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:hummingbird:1"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "golang1.25",
                        "product": "Red Hat Hardened Images",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:hummingbird:1"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "golang1.26",
                        "product": "Red Hat Hardened Images",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift_ai"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9",
                        "product": "Red Hat OpenShift AI (RHOAI)",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift_ai"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9",
                        "product": "Red Hat OpenShift AI (RHOAI)",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift_ai"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "rhoai/odh-model-registry-rhel9",
                        "product": "Red Hat OpenShift AI (RHOAI)",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift_cluster_manager_cli:1"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "ocm-cli-clients/ocm-cli-rhel9",
                        "product": "Red Hat OpenShift Cluster Manager CLI",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift:4"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "openshift4/oc-mirror-plugin-rhel9",
                        "product": "Red Hat OpenShift Container Platform 4",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift:4"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "openshift4/ose-agent-installer-api-server-rhel8",
                        "product": "Red Hat OpenShift Container Platform 4",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift:4"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "openshift4/ose-agent-installer-api-server-rhel9",
                        "product": "Red Hat OpenShift Container Platform 4",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift:4"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "openshift4/ose-agent-installer-csr-approver-rhel8",
                        "product": "Red Hat OpenShift Container Platform 4",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift:4"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "openshift4/ose-agent-installer-csr-approver-rhel9",
                        "product": "Red Hat OpenShift Container Platform 4",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift:4"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "openshift4/ose-agent-installer-node-agent-rhel8",
                        "product": "Red Hat OpenShift Container Platform 4",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift:4"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "openshift4/ose-agent-installer-node-agent-rhel9",
                        "product": "Red Hat OpenShift Container Platform 4",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift:4"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "openshift4/ose-agent-installer-orchestrator-rhel8",
                        "product": "Red Hat OpenShift Container Platform 4",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift:4"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "openshift4/ose-agent-installer-orchestrator-rhel9",
                        "product": "Red Hat OpenShift Container Platform 4",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift:4"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "openshift4/ose-aws-cluster-api-controllers-rhel9",
                        "product": "Red Hat OpenShift Container Platform 4",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:openshift_service_on_aws:1"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "rosa",
                        "product": "Red Hat OpenShift on AWS",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:quay:3"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "quay/clair-rhel8",
                        "product": "Red Hat Quay 3",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:quay:3"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "quay/clair-rhel9",
                        "product": "Red Hat Quay 3",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:quay:3"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "quay/quay-operator-rhel8",
                        "product": "Red Hat Quay 3",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:quay:3"
                        ],
                        "defaultStatus": "affected",
                        "packageName": "quay/quay-operator-rhel9",
                        "product": "Red Hat Quay 3",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:trusted_artifact_signer:1"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "rhtas/createtree-rhel9",
                        "product": "Red Hat Trusted Artifact Signer",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:trusted_artifact_signer:1"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "rhtas/trillian-database-rhel9",
                        "product": "Red Hat Trusted Artifact Signer",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:trusted_artifact_signer:1"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "rhtas/trillian-logserver-rhel9",
                        "product": "Red Hat Trusted Artifact Signer",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:trusted_artifact_signer:1"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "rhtas/trillian-logsigner-rhel9",
                        "product": "Red Hat Trusted Artifact Signer",
                        "vendor": "Red Hat"
                    },
                    {
                        "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
                        "cpes": [
                            "cpe:/a:redhat:trusted_artifact_signer:1"
                        ],
                        "defaultStatus": "unaffected",
                        "packageName": "rhtas/updatetree-rhel9",
                        "product": "Red Hat Trusted Artifact Signer",
                        "vendor": "Red Hat"
                    }
                ],
                "datePublic": "2026-03-26T19:40:51.974Z",
                "descriptions": [
                    {
                        "lang": "en",
                        "value": "A flaw was found in the DataRow.Decode function within the github.com/jackc/pgproto3/v2 component. A malicious or compromised PostgreSQL server can exploit this by sending a DataRow message containing a negative field length. This improper validation of field lengths leads to a \"slice bounds out of range panic\", resulting in a Denial of Service (DoS) for the affected application."
                    }
                ],
                "metrics": [
                    {
                        "other": {
                            "content": {
                                "namespace": "https://access.redhat.com/security/updates/classification/",
                                "value": "Important"
                            },
                            "type": "Red Hat severity rating"
                        }
                    },
                    {
                        "cvssV3_1": {
                            "attackComplexity": "LOW",
                            "attackVector": "NETWORK",
                            "availabilityImpact": "HIGH",
                            "baseScore": 7.5,
                            "baseSeverity": "HIGH",
                            "confidentialityImpact": "NONE",
                            "integrityImpact": "NONE",
                            "privilegesRequired": "NONE",
                            "scope": "UNCHANGED",
                            "userInteraction": "NONE",
                            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
                            "version": "3.1"
                        },
                        "format": "CVSS"
                    }
                ],
                "problemTypes": [
                    {
                        "descriptions": [
                            {
                                "cweId": "CWE-1285",
                                "description": "Improper Validation of Specified Index, Position, or Offset in Input",
                                "lang": "en",
                                "type": "CWE"
                            }
                        ]
                    }
                ],
                "references": [
                    {
                        "tags": [
                            "vdb-entry",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/security/cve/CVE-2026-32286"
                    },
                    {
                        "name": "RHBZ#2451847",
                        "tags": [
                            "issue-tracking",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451847"
                    },
                    {
                        "tags": [
                            "x_sadp-csaf-vex"
                        ],
                        "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-32286.json"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:22450"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:22714"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:22423"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:21769"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:11070"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:11217"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:11856"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:21017"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:24853"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:19375"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:22465"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:11916"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:11996"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:22347"
                    },
                    {
                        "tags": [
                            "vendor-advisory",
                            "x_refsource_REDHAT"
                        ],
                        "url": "https://access.redhat.com/errata/RHSA-2026:23345"
                    }
                ],
                "solutions": [
                    {
                        "lang": "en",
                        "value": "RHSA-2026:22450: Red Hat Enterprise Linux AppStream (v. 10)"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:22714: Red Hat Enterprise Linux AppStream (v. 9)"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:22423: Multicluster Global Hub 1.3.4"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:21769: Multicluster Global Hub 1.5.6"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:11070: Red Hat Advanced Cluster Security 4.8"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:11217: Red Hat Advanced Cluster Security 4.8"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:11856: Red Hat Quay 3.12"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:21017: Red Hat Quay 3.14"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:24853: Red Hat Quay 3.15"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:19375: Red Hat Quay 3.16"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:22465: Red Hat Quay 3.17"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:11916: Red Hat Quay 3.1"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:11996: Red Hat Quay 3.9"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:22347: Red Hat multicluster global hub 1.4.2"
                    },
                    {
                        "lang": "en",
                        "value": "RHSA-2026:23345: Red Hat multicluster global hub 1.6.0"
                    }
                ],
                "timeline": [
                    {
                        "lang": "en",
                        "time": "2026-03-26T20:01:59.226Z",
                        "value": "Reported to Red Hat."
                    },
                    {
                        "lang": "en",
                        "time": "2026-03-26T19:40:51.974Z",
                        "value": "Made public."
                    }
                ],
                "title": "github.com/jackc/pgproto3/v2: github.com/jackc/pgproto3/v2: Denial of Service via malicious PostgreSQL server",
                "workarounds": [
                    {
                        "lang": "en",
                        "value": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability."
                    }
                ],
                "x_adpType": "supplier",
                "x_generator": {
                    "engine": "sadp-cli 1.0.0"
                },
                "providerMetadata": {
                    "orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
                    "shortName": "redhat-SADP",
                    "dateUpdated": "2026-08-24T12:07:02.338Z"
                }
            }
        ]
    }
}