Hello,
I would like to clarify two points:
1. Are there any known examples of large open-source projects that actively use the ecpg?
2. Do you think it would be appropriate to assign a CVE for this bug?
Best regards, Pavel Nekrasov Fobos-NT