PostgreSQL vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
40 matching records
- High8.6Payload: SQL injection in SQLite/PostgresCheck if you run itEPSS 0.29%Oct 6, 2026
- Critical9.8Marten is a .NET Transactional Document DB and Event Store on PostgreSQL.Check if you run itEPSS 0.54%May 28, 2026
- Critical9.4CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments.Check if you run itEPSS 0.52%May 28, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.Check if you run itEPSS 0.38%May 15, 2026
- Medium5.3Mathesar is a web application that makes working with PostgreSQL databases both simple and powerful.Check if you run itEPSS 0.38%May 15, 2026
- High8.8SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ...Check if you run itEPSS 0.18%May 14, 2026
- High8.8Stack buffer overflow in PostgreSQL module "refint" allows an unprivileged database user to execute arbitrary code as the operating system user running the database.Check if you run itEPSS 0.37%May 14, 2026
- Medium4.3Buffer over-read in PostgreSQL function pg_restore_attribute_stats() accepts array values of unmatched length, which causes query planning to read past end of one array.Check if you run itEPSS 0.21%May 14, 2026
- High7.5Uncontrolled recursion in PostgreSQL SSL and GSS negotiation allows an attacker able to connect to a PostgreSQL AF_UNIX socket to achieve sustained denial of service.Check if you run itEPSS 0.60%May 14, 2026
- Medium6.5Covert timing channel in comparison of MD5-hashed password in PostgreSQL authentication allows an attacker to recover user credentials sufficient to authenticate.Check if you run itEPSS 0.56%May 14, 2026
- High8.8Use of inherently dangerous function PQfn(..., result_is_int=0, ...) in PostgreSQL libpq lo_export(), lo_read(), lo_lseek64(), and lo_tell64() functions allows the ser…Check if you run itEPSS 0.45%May 14, 2026
- High7.2SQL injection in PostgreSQL pg_createsubscriber allows an attacker with pg_create_subscription rights to execute arbitrary SQL as a superuser.Check if you run itEPSS 0.29%May 14, 2026
- High8.8Symlink following in PostgreSQL pg_basebackup plain format and in pg_rewind allows an origin superuser to overwrite local files, e.g.Check if you run itEPSS 0.32%May 14, 2026
- Medium4.3Externally-controlled format string in PostgreSQL timeofday() function allows an attacker to retrieve portions of server memory, via crafted timezone zones.Check if you run itEPSS 0.21%May 14, 2026
- High8.8Integer wraparound in multiple PostgreSQL server features allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds.Check if you run itEPSS 1.01%May 14, 2026
- Medium5.4Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use search_path to find user-defined types, including extension-defined types.Check if you run itEPSS 0.16%May 14, 2026
- High7.1SOGo before 5.12.7, when PostgreSQL or MariaDB is used, and cleartext passwords are stored, allows SQL injection.Check if you run itEPSS 0.37%May 14, 2026
- High7.1SOGo before 5.12.7, when PostgreSQL is used, allows SQL injection.Check if you run itEPSS 0.37%May 14, 2026
- Low2.3pgx is a PostgreSQL driver and toolkit for Go.Check if you run itEPSS 0.49%May 8, 2026
- Critical9.0### Summary A SQL injection vulnerability exists in Rucio versions 1.30.0 and later before 35.8.5, 38.5.5, 39.4.2, and 40.1.1, in .Check if you run itEPSS 0.54%May 6, 2026
- High7.5pgjdbc is an open source postgresql JDBC Driver.Check if you run itEPSS 3.26%Apr 29, 2026
- High8.8Electric is a Postgres sync engine.Check if you run itEPSS 0.53%Apr 21, 2026
- High7.5The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.Check if you run itEPSS 0.59%Apr 15, 2026
- High7.4SQL Injection vulnerability in SchemaHero 0.23.0 via the column parameter to the columnAsInsert function in file plugins/postgres/lib/column.go.Check if you run itEPSS 0.29%Mar 30, 2026
- Medium5.5A flaw has been found in JawherKl node-api-postgres up to 2.5.Check if you run itEPSS 0.49%Mar 16, 2026
Page 1 of 2Next