Vulnerabilities

Timescale pgvectorscale before 0.9.1 contains a type confusion vulnerability that allows low-privileged database users to corrupt memory by shadowing pgvector's vector type or operators.

tiger-gh-mcp-server started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides.

tiger-slack started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides.

pg-aiguide started its MCP HTTP transport without enabling the host allow-list the underlying SDK provides.

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Sim…

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator (tsl/src/compression/algorithms/dictionary.c).

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storin…

TimescaleDB is a time-series database for high-performance real-time analytics packaged as a Postgres extension.

pgai is a Python library that transforms PostgreSQL into a retrieval engine for RAG and Agentic applications.

TimescaleDB, an open-source time-series SQL database, has a privilege escalation vulnerability in versions 2.8.0 through 2.9.2.

Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during extension installation.