Skip to content
← All tracked CVEs

Updated 03:00

not yet fixed but still within SLA

82 open

CVEStatusSeveritySummaryReleaseClock startedDeadline
OpenHighSQL injection in PostgreSQL EXTRACT() deparse allows superuser execution via hostile object definitionssecure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighPostgreSQL 18<18.5 pg_restore_attribute_stats type confusion allows RCE as database OS usersecure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighPostgreSQL ctid selectivity estimator type confusion leaks 4-byte memory-derived values via non-ctid inputsecure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighPostgreSQL logical decoding auth flaw lets REPLICATION users execute arbitrary code as server OS accountsecure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighPostgreSQL 'internal' type confusion lets any user execute arbitrary code; affects <18.5,17.11,16.15,15.19,14.24secure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighType confusion in PostgreSQL portal/cursor lifecycle enables OS-level code execution; pre-18.5, 17.11, 16.15, 15.19, 14.24secure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighPostgreSQL 32-bit pltcl/plperl integer wraparound causes undersized allocation, OOB write, RCEsecure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighPostgreSQL plperl tied-hash return heap overflow enables RCE as database OS usersecure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighPostgreSQL tsvector/tsquery integer wraparound allows OOB write, potential RCE by unprivileged userssecure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighHeap buffer overflow in PostgreSQL to_char(timestamptz) via long timezone abbreviation enables RCEsecure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighPostgreSQL refint type confusion allows arbitrary OS code execution; no CVE; affects pre-18.5/17.11/16.15/15.19/14.24secure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighPostgreSQL pg_dump heap buffer overflow in transform lists enables RCE; versions <18.5/17.11/16.15/15.19/14.24secure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighpsql COPY FROM STDIN pre-input error executes data lines as commandssecure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighInteger wraparound RCE in PostgreSQL fuzzystrmatch via levenshtein/less_equal before 18.5/17.11/16.15/15.19/14.24secure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighPostgreSQL stack buffer overflow in OUT parameter name matching with limited 0/1-byte writessecure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighPostgreSQL regexp heap overflow enables arbitrary code execution via invalid encoding input affects pre-18.5/17.11/16.15/15.19/14.24secure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighpg_dump/pg_dumpall/pg_restore restore-time RCE via psql \restrict/\unrestrict; affects pre-18.5/17.11/16.15/15.19/14.24secure-packages-rollingAug 24, 2026Sep 8, 2026
OpenHighPostgreSQL 'internal' type confusion enables arbitrary OS code execution by any usersecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL pltcl/plperl 32-bit integer wraparound causes OOB write, potential RCE; pre-18.5 affectedsecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL regexp heap overflow enables OS-level RCE via invalid-encoding text; pre-18.5/17.11/16.15/15.19/14.24 affectedsecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL stack buffer overflow in argument name matching via OUT parameter countsecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL plperl tied-hash return heap overflow enables OS code execution; affects pre 18.5/17.11/16.15/15.19/14.24secure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL portal/cursor type confusion permits arbitrary code execution as database OS user pre-18.5/17.11/16.15/15.19/14.24secure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighType confusion in PostgreSQL ctid selectivity estimator enables memory disclosure via crafted non-ctid inputsecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighpg_restore_attribute_stats type confusion lets object creators execute OS code in PostgreSQL 18 before 18.5secure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighLogical decoding lacks authorization, REPLICATION users can dlopen arbitrary files, execute code as server accountsecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL pg_dump heap buffer overflow via crafted long transform lists enables OS user RCEsecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL refint type confusion allows arbitrary code execution as DB OS user (pre-18.5/17.11/16.15/15.19/14.24)secure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL pg_dump/pg_dumpall/pg_restore restore-time RCE via psql \restrict/\unrestrict expansion; CVE-2025-8714 bypasssecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighSecurity: psql COPY FROM STDIN may execute data rows as commands on failuresecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL EXTRACT() deparse SQL injection lets object owners escalate to superuser via deparse consumerssecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL tsvector/tsquery integer wraparound enables unprivileged OOB write and potential RCEsecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL fuzzystrmatch integer wraparound enables RCE via levenshtein/levenshtein_less_equal extreme inputssecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL to_char(timestamptz) heap overflow via long POSIX timezone allows OS-user RCEsecure-packages-26.05Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL tsvector/tsquery integer wraparound causes OOB write RCE; affects <18.5/17.11/16.15/15.19/14.24secure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL portal/cursor type confusion enables arbitrary OS-level code execution; before 18.5/17.11/16.15/15.19/14.24.secure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighpsql COPY FROM STDIN may execute data rows as commands on early failuresecure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL EXTRACT() deparse SQL injection lets object owners run superuser SQL; affects pg_dump and psqlsecure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL regexp heap overflow permits RCE via invalid encoding; pre-18.5/17.11/16.15/15.19/14.24 affectedsecure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighHeap buffer overflow in PostgreSQL plperl tied hash return enables function owner OS code executionsecure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighRestore-time code execution via psql \restrict/\unrestrict in PostgreSQL pg_dump/pg_dumpall/pg_restoresecure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL fuzzystrmatch integer wraparound enables RCE via levenshtein; affects versions before 18.5/17.11/16.15/15.19/14.24secure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighHeap overflow in PostgreSQL to_char(timestamptz) enables code execution via long timezone abbreviationsecure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighpg_dump heap overflow on long transform lists enables RCE; PostgreSQL <18.5/17.11/16.15/15.19/14.24secure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighType confusion in PostgreSQL 'internal' arguments enables arbitrary code execution by any user via functionssecure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighmac80211 use-after-free: fast-RX reads RX status after mesh forwarding reuses skb->cbsecure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL ctid selectivity estimator type confusion leaks 4-byte memory data (pre-18.5/17.11/16.15/15.19/14.24)secure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL 32-bit pltcl/plperl integer wraparound enables OOB write and RCE (pre-18.5/17.11/16.15/15.19/14.24)secure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL 18.0-18.4 pg_restore_attribute_stats type confusion enables OS-level code execution via range/multirangesecure-packages-25.11Aug 25, 2026Sep 9, 2026
OpenHighPostgreSQL logical decoding auth flaw lets REPLICATION users dlopen arbitrary files, execute codesecure-packages-25.11Aug 25, 2026Sep 9, 2026