← All tracked CVEs
Updated 04:00
not yet fixed but still within SLA
82 open
| CVE | Status | Severity | Summary | Release | Clock started | Deadline |
|---|---|---|---|---|---|---|
| Open | High | PostgreSQL refint type confusion enables arbitrary code execution as DB OS user; affects <18.5/17.11/16.15/15.19/14.24 | secure-packages-25.11 | Aug 25, 2026 | Sep 9, 2026 | |
| Open | High | PostgreSQL stack buffer overflow via OUT parameter count in argument name matching; 0x0/0x1 writes | secure-packages-25.11 | Aug 25, 2026 | Sep 9, 2026 | |
| Open | Medium | PostgreSQL: Stale RLS from role/ownership changes enables unauthorized reads/writes via plan reuse | secure-packages-rolling | Aug 24, 2026 | Oct 8, 2026 | |
| Open | Medium | PostgreSQL pgcrypto disabled-cipher bug allows cleartext recovery; wrong-key decrypt bypasses MDC | secure-packages-rolling | Aug 24, 2026 | Oct 8, 2026 | |
| Open | Medium | PostgreSQL ascii() buffer over-read leaks up to 3 bytes; affects versions before 18.5/17.11/16.15/15.19/14.24 | secure-packages-rolling | Aug 24, 2026 | Oct 8, 2026 | |
| Open | Medium | PostgreSQL pg_trgm picksplit buffer over-read leaks memory via split choices; pre-18.5/17.11/16.15/15.19/14.24 | secure-packages-rolling | Aug 24, 2026 | Oct 8, 2026 | |
| Open | Medium | Attacker-controlled CR in configparser multiline values injects unexpected configuration keys and values | secure-packages-rolling | Aug 24, 2026 | Oct 8, 2026 | |
| Open | Medium | Privilege check bypass in PostgreSQL DDL enables DoS via type dependencies (pre-18.5/17.11/16.15/15.19/14.24) | secure-packages-rolling | Aug 24, 2026 | Oct 8, 2026 | |
| Open | Medium | PostgreSQL 16–18 SCRAM iteration-count leak allows unauthenticated user enumeration when non-default scram_iterations | secure-packages-rolling | Aug 24, 2026 | Oct 8, 2026 | |
| Open | Medium | PostgreSQL ascii() buffer over-read leaks up to 3 bytes; affects versions before 18.5/17.11/16.15/15.19/14.24 | secure-packages-26.05 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | PostgreSQL RLS cache invalidation bug allows unauthorized access after role/ownership changes via plan reuse | secure-packages-26.05 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | configparser CR in multiline values allows injected keys/values via attacker-controlled input | secure-packages-26.05 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | PostgreSQL 16–18: SCRAM iteration-count discrepancy enables unauthenticated user enumeration | secure-packages-26.05 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | PostgreSQL pgcrypto disabled OpenSSL ciphers leak plaintext; wrong-key decryption bypasses MDC | secure-packages-26.05 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | PostgreSQL pg_trgm picksplit heap buffer over-read may leak memory via split choices | secure-packages-26.05 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | PostgreSQL DDL lacks auth for range subtype/expressions, enabling DoS on type ALTER/DROP | secure-packages-26.05 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | PostgreSQL stale RLS policies after role or ownership changes due to plan reuse | secure-packages-25.11 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | PostgreSQL ascii() buffer over-read leaks up to 3 bytes via crafted text; affects <18.5/17.11/16.15/15.19/14.24 | secure-packages-25.11 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | PostgreSQL pgcrypto vuln: disabled ciphers allow cleartext recovery, wrong-key decryption bypasses MDC | secure-packages-25.11 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | SCRAM auth iteration-count discrepancy enables user enumeration with non-default scram_iterations; affects PostgreSQL 16–18 pre 18.5/17.11/16.15 | secure-packages-25.11 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | ConfigParser write() allows key/value injection via CR in attacker-controlled multiline values | secure-packages-25.11 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | PostgreSQL pg_trgm picksplit buffer over-read enabling memory inference; affects pre-18.5/17.11/16.15/15.19/14.24 | secure-packages-25.11 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Medium | PostgreSQL DDL missing auth enables DoS on type ALTER/DROP via range/expression dependencies | secure-packages-25.11 | Aug 25, 2026 | Oct 9, 2026 | |
| Open | Low | PostgreSQL ECPG integer underflow enables DoS via bytea without prefix; client memory overwrite | secure-packages-rolling | Aug 24, 2026 | Nov 22, 2026 | |
| Open | Low | PostgreSQL ALTER TABLE ALTER TYPE misassigns stats ownership, enabling unauthorized DROP/ALTER STATISTICS | secure-packages-rolling | Aug 24, 2026 | Nov 22, 2026 | |
| Open | Low | PostgreSQL amcheck EXECUTE privilege allows arbitrary function execution as expression index owners | secure-packages-rolling | Aug 24, 2026 | Nov 22, 2026 | |
| Open | Low | PostgreSQL ALTER TABLE ALTER TYPE misassigns stats ownership, allowing unauthorized DROP/ALTER | secure-packages-26.05 | Aug 25, 2026 | Nov 23, 2026 | |
| Open | Low | PostgreSQL amcheck untrusted search_path permits arbitrary function execution via expression indexes in versions before 18.5/16.15/15.19/14.24 | secure-packages-26.05 | Aug 25, 2026 | Nov 23, 2026 | |
| Open | Low | PostgreSQL ECPG integer underflow: client DoS via missing bytea prefix; pre-18.5/17.11/16.15/15.19/14.24 | secure-packages-26.05 | Aug 25, 2026 | Nov 23, 2026 | |
| Open | Low | PostgreSQL amcheck untrusted search_path enables privilege escalation via expression indexes; affects <18.5/16.15/15.19/14.24 | secure-packages-25.11 | Aug 25, 2026 | Nov 23, 2026 | |
| Open | Low | PostgreSQL ALTER TABLE ALTER TYPE reassigns stats ownership, enabling unauthorized DROP/ALTER; pre-18.5/17.11/16.15/15.19/14.24 | secure-packages-25.11 | Aug 25, 2026 | Nov 23, 2026 | |
| Open | Low | Server-admin triggered PostgreSQL ECPG integer underflow DoS via malformed bytea; pre-18.5/17.11/16.15/15.19/14.24 | secure-packages-25.11 | Aug 25, 2026 | Nov 23, 2026 |