SQL injection via double-minus line comment creation

SQL injection in Uptrace pgdriver before 1.2.15 allows remote attackers to alter PostgreSQL queries through crafted application input. The appendArg function in driver/pgdriver/format.go interpolates a negative number immediately after a minus sign without spacing, creating a double-minus line comment that changes the remaining SQL syntax. Exploitation requires the simple query protocol, an adjacent numeric placeholder, a negative attacker-controlled value, a later multiline string parameter, and a victim application that processes the crafted values; successful input can execute injected SQL statements.