{ "schema_version": "1.4.0", "id": "GHSA-vvfr-p62m-9frc", "modified": "2022-05-02T03:40:12Z", "published": "2022-05-02T03:40:12Z", "aliases": [ "CVE-2009-2943" ], "details": "The postgresql-ocaml bindings 1.5.4, 1.7.0, and 1.12.1 for PostgreSQL libpq do not properly support the PQescapeStringConn function, which might allow remote attackers to leverage escaping issues involving multibyte character encodings.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2009-2943" }, { "type": "WEB", "url": "http://secunia.com/advisories/37048" }, { "type": "WEB", "url": "http://www.debian.org/security/2009/dsa-1909" }, { "type": "WEB", "url": "http://www.osvdb.org/59029" } ], "database_specific": { "cwe_ids": [], "severity": "HIGH", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2009-10-22T16:30:00Z" } }