Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-32286

Fixed in a distro release EPSS <1%CVSS 7.5

The DataRow.Decode function fails to properly validate field lengths. A malicious or compromised PostgreSQL server can send a DataRow message with a negative field length, causing a slice bounds out of range panic.

Published 2026-03-26 · CVE record · OSV

Products: github.com/jackc/pgproto3/v2, Red Hat Enterprise Linux 10, Red Hat Enterprise Linux 9, Red Hat Multicluster Global Hub 1.3.4, Red Hat Multicluster Global Hub 1.4.5, Red Hat Multicluster Global Hub 1.6.5, Red Hat Advanced Cluster Security 4.8, Red Hat multicluster global hub 1.5.3, Red Hat Quay 3.10, Red Hat Quay 3.12, Red Hat Quay 3.14, Red Hat Quay 3.15, Red Hat Quay 3.16, Red Hat Quay 3.17, Red Hat Quay 3.9, Assisted Installer for Red Hat OpenShift Container Platform 2, Red Hat Multicluster Engine for Kubernetes, Red Hat Multicluster Global Hub, Red Hat Advanced Cluster Management for Kubernetes 2, Red Hat Advanced Cluster Security 4, Red Hat Enterprise Linux 8, Red Hat Hardened Images, Red Hat OpenShift AI (RHOAI), Red Hat OpenShift Cluster Manager CLI, Red Hat OpenShift Container Platform 4, Red Hat OpenShift on AWS, Red Hat Quay 3, Red Hat Trusted Artifact Signer

Fixed upstream

EcosystemPackageFixed in
Gogithub.com/jackc/pgproto3/v2no fix

Distro releases

ReleasePackageFixed in
Chainguardargo-workflow-controller-3.6no fix
Chainguardargo-workflow-controller-fips-3.6no fix
Chainguardargo-workflow-executor-3.6no fix
Chainguardargo-workflow-executor-fips-3.6no fix
Chainguardargo-workflows-3.6no fix
Chainguardargo-workflows-fips-3.6no fix
Chainguardbento1.16.1-r1
Chainguardbento-fips1.16.1-r1
Chainguardflyte0
Chainguardgotrueno fix
Chainguardgotrue-fipsno fix
Chainguardgrafana-alloy1.17.0-r0
Chainguardgrafana-alloy-fips1.17.0-r0
Chainguardharbor-2.11no fix
Chainguardharbor-2.11-exporterno fix
Chainguardharbor-2.11-jobserviceno fix
Chainguardharbor-2.11-registryctlno fix
Chainguardharbor-2.12no fix
Chainguardharbor-2.12-exporterno fix
Chainguardharbor-2.12-jobserviceno fix
Chainguardharbor-2.12-registryctlno fix
Chainguardharbor-2.13no fix
Chainguardharbor-2.13-exporterno fix
Chainguardharbor-2.13-jobserviceno fix
Chainguardharbor-2.13-registryctlno fix
Chainguardharbor-2.14no fix
Chainguardharbor-2.14-exporterno fix
Chainguardharbor-2.14-jobserviceno fix
Chainguardharbor-2.14-registryctlno fix
Chainguardharbor-2.152.15.2-r0
Chainguardharbor-2.15-exporter2.15.2-r0
Chainguardharbor-2.15-jobservice2.15.2-r0
Chainguardharbor-2.15-registryctl0
Chainguardharbor-fips-2.11no fix
Chainguardharbor-fips-2.11-exporterno fix
Chainguardharbor-fips-2.11-jobserviceno fix
Chainguardharbor-fips-2.11-registryctlno fix
Chainguardharbor-fips-2.12no fix
Chainguardharbor-fips-2.12-exporterno fix
Chainguardharbor-fips-2.12-jobserviceno fix
Chainguardharbor-fips-2.12-registryctlno fix
Chainguardharbor-fips-2.13no fix
Chainguardharbor-fips-2.13-exporterno fix
Chainguardharbor-fips-2.13-jobserviceno fix
Chainguardharbor-fips-2.13-registryctlno fix
Chainguardharbor-fips-2.14no fix
Chainguardharbor-fips-2.14-exporterno fix
Chainguardharbor-fips-2.14-jobserviceno fix
Chainguardharbor-fips-2.14-registryctlno fix
Chainguardharbor-fips-2.152.15.2-r0
Chainguardharbor-fips-2.15-exporter2.15.2-r0
Chainguardharbor-fips-2.15-jobservice2.15.2-r0
Chainguardharbor-fips-2.15-registryctl0
Chainguardhydrano fix
Chainguardhydra-fipsno fix
Chainguardkots1.131.3-r0
Chainguardmigrateno fix
Chainguardory-ketono fix
Chainguardory-keto-fipsno fix
Chainguardory-kratosno fix
Chainguardory-kratos-fipsno fix
Chainguardsplunk-otel-collector0.154.0-r0
Chainguardsplunk-otel-collector-compat0.160.0-r0
Chainguardsplunk-otel-collector-fips0.154.0-r0
Chainguardsrc0
Chainguardsteampipe2.4.0-r4
Chainguardtelegraf-1.35no fix
Chainguardtelegraf-1.36no fix
Chainguardtelegraf-1.371.37.3-r7
Chainguardtelegraf-1.381.38.1-r2
Chainguardteleport-15no fix
Chainguardteleport-1717.7.23-r0
Chainguardteleport-17-operator17.7.23-r0
Chainguardteleport-1818.7.6-r0
Chainguardteleport-18-operator18.7.6-r0
Chainguardteleport-18.60
Chainguardteleport-18.6-operator0
Chainguardteleport-operator-fips-160
Chainguardteleport-operator-fips-170
Chainguardteleport-operator-fips-180
Chainguardtrillian-fips-logserverno fix
Chainguardtrillian-fips-logsignerno fix
Chainguardtrillian-logserverno fix
Chainguardtrillian-logsignerno fix
Chainguardvault-1.16no fix
Chainguardvault-1.17no fix
Chainguardvault-1.18no fix
Chainguardvault-1.19no fix
Chainguardvault-1.20no fix
Chainguardvault-1.21no fix
Chainguardvault-fips-1.21no fix
Chainguardwavefront-collector-for-kubernetes-1.12no fix
Chainguardwavefront-collector-for-kubernetes-1.13no fix
Debian 12golang-github-jackc-pgproto3no fix
Debian 13golang-github-jackc-pgproto3no fix
Debian 14golang-github-jackc-pgproto32.3.3-2
Red Hat Enterprise Linux 10.2osbuild-composer0:165.1-2.el10_2
Red Hat Enterprise Linux 10.2osbuild-composer-core0:165.1-2.el10_2
Red Hat Enterprise Linux 10.2osbuild-composer-core-debuginfo0:165.1-2.el10_2
Red Hat Enterprise Linux 10.2osbuild-composer-debuginfo0:165.1-2.el10_2
Red Hat Enterprise Linux 10.2osbuild-composer-debugsource0:165.1-2.el10_2
Red Hat Enterprise Linux 10.2osbuild-composer-tests-debuginfo0:165.1-2.el10_2
Red Hat Enterprise Linux 10.2osbuild-composer-worker0:165.1-2.el10_2
Red Hat Enterprise Linux 10.2osbuild-composer-worker-debuginfo0:165.1-2.el10_2
Red Hat Enterprise Linux 9osbuild-composer0:165.1-2.el9_8
Red Hat Enterprise Linux 9osbuild-composer-core0:165.1-2.el9_8
Red Hat Enterprise Linux 9osbuild-composer-core-debuginfo0:165.1-2.el9_8
Red Hat Enterprise Linux 9osbuild-composer-debuginfo0:165.1-2.el9_8
Red Hat Enterprise Linux 9osbuild-composer-debugsource0:165.1-2.el9_8
Red Hat Enterprise Linux 9osbuild-composer-tests-debuginfo0:165.1-2.el9_8
Red Hat Enterprise Linux 9osbuild-composer-worker0:165.1-2.el9_8
Red Hat Enterprise Linux 9osbuild-composer-worker-debuginfo0:165.1-2.el9_8
Rocky Linux 10osbuild-composer0:165.1-2.el10_2.rocky.0.1
Rocky Linux 9osbuild-composer0:165.1-2.el9_8.rocky.0.1
Ubuntu 24.04 LTSgolang-github-jackc-pgproto3no fix
Ubuntu 25.10golang-github-jackc-pgproto3no fix
Ubuntu 26.04 LTSgolang-github-jackc-pgproto3no fix
Ubuntu 26.10golang-github-jackc-pgproto3no fix
Wolfibento1.16.1-r1
Wolfiflyte0
Wolfigrafana-alloy1.17.0-r0
Wolfiharbor-2.14no fix
Wolfiharbor-2.14-exporterno fix
Wolfiharbor-2.14-jobserviceno fix
Wolfiharbor-2.14-registryctlno fix
Wolfihydrano fix
Wolfikots1.131.3-r0
Wolfimigrateno fix
Wolfisplunk-otel-collector0.154.0-r0
Wolfisplunk-otel-collector-compat0.160.0-r0
Wolfisrc0
Wolfisteampipe2.4.0-r4
Wolfitelegraf-1.36no fix
Wolfitelegraf-1.371.37.3-r7
Wolfitelegraf-1.381.38.1-r2
Wolfiteleport-18.60
Wolfiteleport-18.6-operator0
Wolfitrillian-logserverno fix
Wolfitrillian-logsignerno fix
openSUSE Leap 15.6govulncheck-vulndb0.0.20260326T203309-150000.1.155.2
openSUSE Leap 15.6govulncheck-vulndb0.0.20260402T184258-150000.1.158.1
openSUSE Leap 16.0govulncheck-vulndb0.0.20260723T184607-160000.1.1