Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: PostgreSQL 13.22, 14.19 and 3 more versions Clear all filters
TI-2025-07976 CVE-2025-8715 · GHSA-xh8r-9824-53cf

PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server

Priority MEDIUM 41

Improper neutralization of newlines in pg_dump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump,…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00474 Published 2025-08-14 Partial fix · 17.6, 16.10 +3 CWE-93
TI-2025-07975 CVE-2025-8714 · GHSA-6m5q-cc57-2mj6

PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client

Priority MEDIUM 41

Untrusted data inclusion in pg_dump in PostgreSQL allows a malicious superuser of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the d…

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00778 Published 2025-08-14 Partial fix · 17.6, 16.10 +3 CWE-829