11 matches found
pgbackrest
pgBackRest 可靠的 PostgreSQL 备份与恢复 简介 pgBackRest 是一款可靠的 PostgreSQL 备份与恢复解决方案，可无缝扩展至最大的数据库和工作负载。 pgBackRest v2.59.1 是当前稳定版本。发行说明位于 Releases 页面。 如果您喜欢 pgBackRest，请在 GitHub 上给我们点个星标！ 新闻 2026 年 8 月 17 日 - pgBackRest 2.59.1 发布 2026 年 7 月 20 日 - 新的发行版压缩包 2026 年 7 月 20 日 - pgBackRest 2.59.0 发布 功能特性...
GHSA-P853-83GJ-WJJ3 NocoBase backup restore schema name allows command injection
Summary NocoBase @nocobase/plugin-backups 2.0.57 restores PostgreSQL backups by interpolating the backup metadata schema name into shell command strings that are executed with Node.js childprocess.exec. A backup-management user who can restore an uploaded PostgreSQL backup with forced schema...
NocoBase backup restore schema name allows command injection
Summary NocoBase @nocobase/plugin-backups 2.0.57 restores PostgreSQL backups by interpolating the backup metadata schema name into shell command strings that are executed with Node.js childprocess.exec. A backup-management user who can restore an uploaded PostgreSQL backup with forced schema...
CVE-2026-6475
Symlink following in PostgreSQL pgbasebackup plain format and in pgrewind allows an origin superuser to overwrite local files, e.g. /var/lib/postgres/.bashrc, that hijack the operating system account. It will remain the case that starting the server after these commands implicitly trusts the orig...
EUVD-2024-3540
Malicious code in bioql PyPI...
CVE-2024-56142
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges equivalent to those of pghoard, allowing for unintended path traversal. Depending on th...
CVE-2024-56142 Path Traversal in pghoard
pghoard is a PostgreSQL backup daemon and restore tooling that stores backup data in cloud object stores. A vulnerability has been discovered that could allow an attacker to acquire disk access with privileges equivalent to those of pghoard, allowing for unintended path traversal. Depending on th...
CVE-2024-56142
The CVE-2024-56142 issue affects pghoard, a PostgreSQL backup/restore daemon that stores backups in cloud object stores. It describes a path traversal vulnerability that could allow an attacker to obtain disk access with privileges equivalent to pghoard, potentially leading to disclosure of sensi...
PGHoard 路径遍历漏洞
PGHoard is a PostgreSQL backup daemon and restore tool from Aiven Open Source. It is used to store backup data in cloud object storage. A path traversal vulnerability exists in PGHoard 2.2.2a and earlier versions, which stems from a vulnerability that allows an attacker to gain disk access with t...
CVE-2023-28630 Sensitive information disclosure possible on misconfigured failed backups of non-H2 databases in gocd
GoCD is an open source continuous delivery server. In GoCD versions from 20.5.0 and below 23.1.0, if the server environment is not correctly configured by administrators to provide access to the relevant PostgreSQL or MySQL backup tools, the credentials for database access may be unintentionally...