Skip to content
Patch Next
Sign inAdd to your agent

← Public intelligence

Go package

github.com/aws/aws-advanced-go-wrapper/pgx-driver

Open actionable advisories and recorded vendor fixes. This public package view has no inventory attached and cannot establish whether your deployment is affected. A vendor fix never resolves your finding; verify your installed version and the source guidance.

Open advisories

1 actionable advisory, newest first. Withdrawn advisories and news are excluded. Coverage is partial.

  1. High, CVSS 8.0GoPublished

    AWS Advanced Go Wrapper: Privilege Escalation in Aurora PostgreSQL Instance

    GHSA-7wq2-32h4-9hc9

    Affected
    • Go github.com/aws/aws-advanced-go-wrapper/pgx-driver < 1.0.2
    Fixed in
    1.0.2· Vendor fix available
    Issue
    of Vulnerability: An issue in AWS Wrappers for Amazon Aurora PostgreSQL may allow for privilege escalation to rdssuperuser role. A low privilege authenticated user can create a crafted function that could be executed with permissions of other Amazon Relational Database Service (RDS) users. We recommend customers upgrade to the following versions: AWS Go Wrapper to 2025-10-17 Source of Vulnerability Report: Allistair Ishmael Hakim allistair.hakim@gmail.com Affected products & versions: AWS Go Wrapper < 2025-10-17 Platforms: MacOS/Windows/Linux

    Recommended action: Upgrade to 1.0.2 or later, then redeploy and verify.A vendor fix does not resolve your finding until you verify it in your own systems.

    Sources:github.comSource checked Evidence →