CVE-2026-76240

creationtimestamp| type| source ---|---|--- 2026-08-20 05:10:04+00:00| seen| https://bsky.app/profile/stackflag.bsky.social/post/3mtii665jez2t...

CVE-2026-76240 stigmem Postgres SQL Injection via Schema Identifier

stigmem-node 0.9.0a1 interpolates Postgres backend schema identifiers into SQL strings without defensive quoting. In the affected code path the schema value is operator-controlled, but the unsafe pattern could allow SQL injection if a schema name were derived from tenant, request, or user input...