Security changelog
Fixed in YDB 22.4.44, 2022-11-28
CVE-2022-28228
Out-of-bounds read was discovered in YDB server. An attacker could construct a query with an insert statement that would allow them to access confidential information or cause a crash.
Link to CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-28228.
Credits: Maxim Arnold.