75 matches found
CVE-2026-3172
A flaw was found in pgvector. A buffer overflow vulnerability in the parallel Hierarchical Navigable Small World HNSW index build process allows a database user to exploit this flaw. This can lead to the disclosure of sensitive data from other database relations or cause the database server to...
CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
DEBIAN-CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
UBUNTU-CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172 pgvector buffer overflow in parallel HNSW index build
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172
CVE-2026-3172 describes a buffer overflow in the parallel HNSW index build of pgvector versions 0.6.0 through 0.8.1. The flaw allows a database user to leak sensitive data from other relations or crash the database server. Affected component: pgvector’s parallel HNSW index construction. Root caus...
CVE-2026-3172 pgvector buffer overflow in parallel HNSW index build
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172 pgvector buffer overflow in parallel HNSW index build
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
pgvector 安全漏洞
pgvector is an open-source Postgres vector similarity search tool developed by pgvector. Versions 0.6.0 to 0.8.1 of pgvector contain security vulnerabilities. These vulnerabilities stem from buffer overflows during the parallel HNSW index construction process, which could lead to data leaks or...
PT-2026-22023
Name of the Vulnerable Software and Affected Versions pgvector versions 0.6.0 through 0.8.1 Description A buffer overflow exists in the parallel HNSW index build process within pgvector versions 0.6.0 through 0.8.1. This issue allows a database user to potentially leak sensitive data from other...
SUSE SLES16 Security Update : postgresql17 and postgresql18 (SUSE-SU-2026:20194-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20194-1 advisory. Changes in postgresql17, postgresql18: Update to 17.7: https://www.postgresql.org/about/news/p-3171/...
Exploit for CVE-2026-25211
Llama Stack pgvector Password Leak PoC CVE-2026-25211 Loc...
Insertion of Sensitive Information into Log File
Overview llama-stack is a Llama Stack Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the pgvector.py component. An attacker can obtain sensitive information by accessing log files that contain uncensored credentials. Remediation Upgrade...
GHSA-XMFJ-7PP5-FXR6 Llama Stack exposes secret in initialization log
Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...
Llama Stack exposes secret in initialization log
Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...