THREATIST.IORead the docs 4 records
Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g.
Incorrect privilege assignment in PostgreSQL allows a less-privileged application user to view or change different rows from those intended.
Client use of server error message in PostgreSQL allows a server not trusted under current SSL or GSS settings to furnish arbitrary non-NUL bytes to the libpq application.
Incomplete tracking in PostgreSQL of tables with row security allows a reused query to view or change different rows from those intended.