Vulnerabilities

TI-2026-11105 CVE-2026-13056 · GHSA-7wp7-648j-j534

A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM

LOW 31

Using expressions that generate large arrays it is possible to craft a query that creates very large intermediate objects in memory, causing the server to crash with OOM error.

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00402 Published 2026-07-22 Fixed in 8.0.28, 8.3.7 CWE-1325

TI-2026-11116 CVE-2026-13067 · GHSA-fcc5-5hp3-gxp7

tlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket

LOW 32

When PROXY protocol v2 is used on the Unix domain socket path, roles derived from X.509 client certificates may not be validated against the configured tlsCATrusts allow-list.

CVSS 4.0HIGH 7.2 Local Low privileges No interaction EPSS 0.00096 Published 2026-07-22 Fixed in 8.0.28, 8.3.7 CWE-863

Vulnerabilities

Filters

A user with read access can cause a DoS by executing a specifically crafted query to consume a large amount of RAM

tlsCATrusts Role Restriction Not Enforced via PROXY Protocol v2 on Unix Domain Socket