PostgreSQL · week of 12 Oct 2026
PostgreSQL security note
Records on this stack that changed between 12 Oct 2026 and the following Monday. Versions come from the stored ranges. A quiet week is not proof the stack is clear.
What changed
CVE-2026-105856 — Check if you run it
Payload: SQL injection in SQLite/Postgres
Affected: 4.0.0, 3.0.0 → 3.90.0, 4.0.0-canary.0 → 4.0.0-canary.34, 3.0.0 → 3.73.0
What we still do not know
Every changed record in this note has a version range.
Share this note
PostgreSQL security note, week of 12 Oct 2026: 1 record has a version a customer can check, and 0 still do not. https://zerodayfindings.com/technologies/postgresql/notes/2026-W42