PostgreSQL vulnerabilities
Every vulnerability this feed holds for PostgreSQL, merged from five public registers and ordered by what warrants attention first — exploited in the wild, then CVSS, then recency.
11 vulnerabilities tracked.
- 7.5 Several psqlODBC entry points use an application-supplied column number or row index as an array index without validating it.
- 7.5 SQLSpecialColumns in psqlODBC splices the table and schema names it receives into its catalog query without escaping them, while the other…
- 7.5 The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a {fn} escape into a fixed 16-entry…
- 7.5 psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count from each later FETCH reply…
- 7.5 psqlODBC copies the reply to a large-object read (loread) into the application's buffer using the length sent by the server, without…
- 7.1 For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC uses that column to identify rows.
- 6.8 For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name, as reported…
- 5.9 For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the query.
- 5.9 When psqlODBC quotes a schema or table name into a 128-byte stack buffer, its length check lets it write up to two bytes past the end of…
- 5.9 psqlODBC trusts counts and lengths in server data in three places.
- 5.3 On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name, user name,…
What this covers
This feed accumulates forward from the day it started storing records, and a name search that finds nothing here is also looked up against the registers directly — so an older advisory resolves even when it predates the corpus. It is still a reading view, not a substitute for the vendor's own advisory, and absence from this page is not a statement that PostgreSQL is free of vulnerabilities.
Query this from an agent over MCP · Check a lockfile by version
Other vendors tracked here
Microsoft Red Hat n/a MediaTek, Inc. Linux Apache Software Foundation Gitea WAVLINK Huawei Eclipse Foundation Apple WSO2 Dell Control Web Panel Hewlett Packard Enterprise (HPE) nodejs Netpbm aws zephyrproject MONGODB Cisco Unknown Petpooja Oray