PT-2026-42373 · Go · Github.Com/Ydb-Platform/Ydb-Go-Sdk/V3

Published 2026-05-20 · Updated 2026-05-20

OSV

ydb-go-sdk's transactions are not committed using the options.WithCommit() option on last call table.Transaction.Execute in transaction in github.com/ydb-platform/ydb-go-sdk

Related Identifiers

GO-2026-4983

Affected Products

Github.Com/Ydb-Platform/Ydb-Go-Sdk/V3

References · 8

• https://osv.dev/vulnerability/GO-2026-4983 · Vendor Advisory
• https://github.com/ydb-platform/ydb-go-sdk/commit/251128a64763555d9a79ee7a131dd154c9000eb9 · Note
• https://github.com/ydb-platform/ydb-go-sdk/pull/2091 · Note
• https://github.com/ydb-platform/ydb-go-sdk/releases/tag/v3.134.1 · Note
• https://github.com/ydb-platform/ydb-go-sdk/commit/25dcff4c41153f1f9413512ba12999b40bf7154d · Note
• https://github.com/ydb-platform/ydb-go-sdk/releases/tag/v3.134.2 · Note
• https://github.com/ydb-platform/ydb-go-sdk/releases/tag/v3.104.6 · Note
• https://github.com/ydb-platform/ydb-go-sdk/security/advisories/GHSA-28xx-pppm-vqff · Note