uptrace/bun

Releases1.15K

Frequency1 day 12 hours

Last Release5 months ago

Stars4.89K

SQL-first Golang ORM

CVE History

CVE	Affected	Published	CVSS v3	CVSS v2
CVE-2024-44906NVD↗	—	Jun 12, 2025Thursday, 12 June 2025, 16:15	6.5 MEDIUM	—
uptrace pgdriver v1.2.1 was discovered to contain a SQL injection vulnerability via the appendArg function in /pgdriver/format.go. The maintainer has stated that the issue is fixed in v1.2.15.