Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

postgresql — Vulnerabilities & Security Advisories 163

All 163 CVE vulnerabilities found in postgresql, with AI-generated Chinese analysis, references, and POCs.

This page documents known software vulnerabilities within the PostgreSQL database management system, categorized by Common Weakness Enumeration tags. It aggregates security issues affecting the vendor’s open-source relational database product, covering a historical time range from initial public disclosures to the most recent patch releases. Here, users can track vendor advisories issued by the PostgreSQL Global Development Group, understand specific weakness classes such as injection flaws or improper access controls, and look up the product's comprehensive vulnerability history. The data is organized to facilitate efficient risk assessment for database administrators, security engineers, and compliance officers who need to evaluate the impact of known defects on their infrastructure. By centralizing these reports, the resource allows stakeholders to correlate specific CVE identifiers with affected versions and available fixes. This systematic approach supports proactive vulnerability management by highlighting trends in security defects over time. Readers can compare the severity ratings assigned by different tracking authorities and review the timeline of remediation efforts. The information aids in prioritizing patches and configuration changes to mitigate risks associated with legacy versions. Maintaining an accurate record of these issues is essential for ensuring the integrity and availability of applications relying on this database engine. The content strictly adheres to factual reporting standards to support technical decision-making processes without speculation.

Vendor: n/a

CVE ID Title CVSS Severity Published
CVE-2026-116326 PostgreSQL plperl tied-object exceptions follow stale sigjmp_buf CWE-672 8.8 High 2026-11-12
CVE-2026-116323 PostgreSQL pltcl reentrant result conversion use-after-free executes arbitrary code CWE-416 8.8 High 2026-11-12
CVE-2026-116325 PostgreSQL reindexdb index name quoting allows SQL injection CWE-89 8.0 High 2026-11-12
CVE-2026-116322 PostgreSQL pre-authentication cancel request can leak a spinlock CWE-667 5.3 Medium 2026-11-12
CVE-2026-116321 PostgreSQL unterminated name value discloses server memory CWE-170 4.3 Medium 2026-11-12
CVE-2026-116320 PostgreSQL plperl array and hash conversion use-after-free executes arbitrary code CWE-416 8.8 High 2026-11-12
CVE-2026-116319 PostgreSQL plperl reentrant return_next() use-after-free executes arbitrary code CWE-416 8.8 High 2026-11-12
CVE-2026-116318 PostgreSQL pg_dump not-null constraint name allows SQL injection CWE-89 8.8 High 2026-11-12
CVE-2026-116317 PostgreSQL ts_rank_cd() heap buffer overflow may execute arbitrary code CWE-122 8.8 High 2026-11-12
CVE-2026-116316 PostgreSQL security-restricted operations can create types in pg_temp, which later queries of the session find CWE-424 8.8 High 2026-11-12
CVE-2026-116315 PostgreSQL tsvector_delete() heap buffer overflow executes arbitrary code CWE-122 8.8 High 2026-11-12
CVE-2026-116314 PostgreSQL pg_restore executes arbitrary code due to missing non-plain archive validation CWE-20 8.8 High 2026-11-12
CVE-2026-116313 PostgreSQL "vacuumdb --missing-stats-only" lets a database owner execute code as the vacuumdb user CWE-426 7.2 High 2026-11-12
CVE-2026-116312 PostgreSQL MERGE can place the wrong row in a trigger transition table CWE-1250 5.4 Medium 2026-11-12
CVE-2026-116310 PostgreSQL COPY error context uses freed field storage CWE-416 4.3 Medium 2026-11-12
CVE-2026-116311 PostgreSQL DROP OWNED can remove restrictive row security policies from non-owned tables CWE-862 5.4 Medium 2026-11-12
CVE-2026-116309 PostgreSQL plperl blessed-reference type confusion may execute arbitrary code CWE-843 8.8 High 2026-11-12
CVE-2026-116308 PostgreSQL dict_int reads beyond zero-length tokens CWE-126 4.3 Medium 2026-11-12
CVE-2026-116307 PostgreSQL plperl prepared-query use-after-free executes arbitrary code CWE-416 8.8 High 2026-11-12
CVE-2026-116304 PostgreSQL parallel RECORD typmod use-after-free executes arbitrary code CWE-416 8.8 High 2026-11-12
CVE-2026-116306 PostgreSQL composite-type change during field assignment executes arbitrary code CWE-843 8.8 High 2026-11-12
CVE-2026-116303 PostgreSQL foreign key and JSON conversions bypass EXECUTE privilege on cast functions CWE-862 3.1 Low 2026-11-12
CVE-2026-14671 PostgreSQL refint plan cache type confusion executes arbitrary code CWE-843 8.8 High 2026-08-13
CVE-2026-6471 PostgreSQL logical decoding can dlopen arbitrary file CWE-862 7.2 High 2026-08-13
CVE-2026-6469 PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership CWE-708 3.8 Low 2026-08-13
CVE-2026-6470 PostgreSQL fails to check type USAGE privilege CWE-862 4.3 Medium 2026-08-13
CVE-2026-6464 PostgreSQL psql COPY FROM STDIN early failure processes data lines as psql commands CWE-829 8.1 High 2026-08-13
CVE-2026-19385 PostgreSQL pg_dump heap buffer overflow executes arbitrary code CWE-122 8.8 High 2026-08-13
CVE-2026-18408 PostgreSQL psql \unrestrict lets superuser of pg_dump origin server execute arbitrary code in psql client CWE-829 8.8 High 2026-08-13
CVE-2026-18024 PostgreSQL ascii() function reads past end of buffer CWE-126 4.3 Medium 2026-08-13

All 163 known CVE vulnerabilities affecting postgresql with full Chinese analysis, references, and POCs where available.