TI-2025-00929 CVE-2025-1094 · GHSA-mhw9-x46c-v6q4
PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation
Priority HIGH 80
Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in cer…