Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: PostgreSQL 13.23, 14.20 and 4 more versions Clear all filters
TI-2025-11741 CVE-2025-12818 · GHSA-pr6x-gg24-6wfp

PostgreSQL libpq undersizes allocations, via integer wraparound

Priority LOW 26

Integer wraparound in multiple PostgreSQL libpq client library functions allows an application input provider or network peer to cause libpq to undersize an allocation and write out-of-bounds by hundreds of megabytes.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.00364 Published 2025-11-13 Partial fix · 18.1, 17.7 +4 CWE-190
TI-2025-11740 CVE-2025-12817 · GHSA-99qj-9hw7-85x8

PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege

Priority LOW 15

Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema.

CVSS 3.1LOW 3.1 Network Low privileges No interaction EPSS 0.00243 Published 2025-11-13 Partial fix · 18.1, 17.7 +4 CWE-862