CVE-2022-3023: Pingcap Tidb

Critical severity, CVSS 9.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Use of Externally-Controlled Format String in GitHub repository pingcap/tidb prior to 6.4.0, 6.1.3.

Affected products

• Pingcap Tidb: before 6.4.0 (fixed in 6.4.0); from 6.1.0, before 6.1.3 (fixed in 6.1.3)

Published 2022-11-04. Last modified 2026-06-17.