AIKIDO-2025-10069
postgres-types is vulnerable to Uncaught Exception
18
Low Risk
This Affects:
postgres-typesTL;DR
Affected versions of this package are vulnerable to uncaught exceptions. A panic occurs when attempting to retrieve a PrimitiveDateTime value in the from_sql function, if it is set to infinity. This issue can cause unexpected crashes, potential denial-of-service (DoS) conditions, or instability in applications relying on this functionality.
Who does this affect?
You are affected if you are using a version that falls within the vulnerable range.
Background info
postgres-types is vulnerable to Uncaught Exception in versions 0.1.0 - 0.2.8.
How to fix this
Upgrade the postgres-types library to the patch version.
Are You Affected?
Connect your repositories to instantly see whether vulnerable or malicious packages exist in your codebase.
Free. No credit card required.
SOC 2Compliant
ISO 27001Compliant