PostgreSQL
PostgreSQL and related data-store CVEs from public sources.
28 public records currently classified under this stack.
Recent PostgreSQL findings
Full list- High8.6Payload: SQL injection in SQLite/PostgresEPSS 0.3%Oct 6, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.May 15, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.May 15, 2026
- High8.8SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ...May 14, 2026
- High8.8Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database.May 14, 2026
- Medium4.3Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.May 14, 2026
- High7.5Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service.May 14, 2026
- Medium6.5Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate.May 14, 2026
- High8.8Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the ser…May 14, 2026
- High7.2SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser.May 14, 2026