1152 matches found
MAL-2025-29547 Malicious code in postgres-astroinformatics-janus-mocha (npm)
The package postgres-astroinformatics-janus-mocha was found to contain malicious code...
MAL-2025-15205 Malicious code in avior-halley-postgres-lynx (npm)
The package avior-halley-postgres-lynx was found to contain malicious code...
MAL-2025-28680 Malicious code in paleomagnetism-postgres-aether-stop (npm)
The package paleomagnetism-postgres-aether-stop was found to contain malicious code...
MAL-2025-26576 Malicious code in mocha-helios-postgres-registry (npm)
The package mocha-helios-postgres-registry was found to contain malicious code...
MAL-2025-28673 Malicious code in paleoecology-comet-postgres-blazar (npm)
The package paleoecology-comet-postgres-blazar was found to contain malicious code...
MAL-2025-25901 Malicious code in mantle-async-nebula-postgres (npm)
The package mantle-async-nebula-postgres was found to contain malicious code...
MAL-2025-14970 Malicious code in astro-postgres-init-oauth (npm)
The package astro-postgres-init-oauth was found to contain malicious code...
MAL-2025-16706 Malicious code in celeste-testcafe-postgres-unuk (npm)
The package celeste-testcafe-postgres-unuk was found to contain malicious code...
MAL-2025-23184 Malicious code in indus-postgres-avior-node-config (npm)
The package indus-postgres-avior-node-config was found to contain malicious code...
MAL-2025-29548 Malicious code in postgres-child-process-package-arcturus (npm)
The package postgres-child-process-package-arcturus was found to contain malicious code...
MAL-2025-29549 Malicious code in postgres-rocket-install-postcss (npm)
The package postgres-rocket-install-postcss was found to contain malicious code...
CVE-2025-8715 PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server
Improper neutralization of newlines in pgdump in PostgreSQL allows a user of the origin server to inject arbitrary code for restore-time execution as the client operating system account running psql to restore the dump, via psql meta-commands inside a purpose-crafted object name. The same attacks...
CRLF Injection
Overview Affected versions of this package are vulnerable to CRLF Injection in the restore process via psql meta-commands inside a purpose-crafted object name. An attacker can execute arbitrary code by injecting meta commands into the file, which can be executed by an unknowing user during the...
Exposure of Sensitive Information Through Metadata
Overview Affected versions of this package are vulnerable to Exposure of Sensitive Information Through Metadata via optimizer statistics. An attacker can access sensitive sampled data by querying views, partitions, or child tables by crafting a leaky operator that bypasses view access control lis...
@fedify/amqp (=0.2.0-dev.12), @fedify/postgres (>=0.3.0 <=0.3.0-dev.22) +1 more potentially affected by CVE-2025-54888 via @fedify/fedify (>=1.5.0-dev.732 <=1.5.0)
@fedify/fedify NPM version =1.5.0-dev.732, =0.3.0, =0.4.0, =0.4.0-dev.19 Source cves: CVE-2025-54888 Source advisory: SNYK:JS-FEDIFYFEDIFY-11735306...
@de-otio/trellis (>=0.4.0 <=0.7.1), @fedify/amqp (>=0.1.0 <=0.2.0-dev.11) +6 more potentially affected by CVE-2025-54888 via @fedify/fedify (>=0.10.2 <=1.10.10)
@fedify/fedify NPM version =0.10.2, =0.4.0, =0.1.0, =0.3.0, =0.3.0, =0.1.0, =0.1.0, =0.0.1, =0.1.0, =1.1.20 Source cves: CVE-2025-54888 Source advisory: OSV:GHSA-6JCC-XGCR-Q3H4...
CLSA-2025-1753963973 php: Fix of CVE-2025-1735
CVE-2025-1735: add error checking for pgsql extension escape functions, mainly to fix possible issues with multi-byte encoding of Postgres databases...
BIT-PHP-MIN-2025-1735 pgsql extension does not check for errors during escaping
In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. pgsql and pdopgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid...
CVE-2025-1735
In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. pgsql and pdopgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid...
CVE-2025-1735
In PHP versions:8.1. before 8.1.33, 8.2. before 8.2.29, 8.3. before 8.3.23, 8.4. pgsql and pdopgsql escaping functions do not check if the underlying quoting functions returned errors. This could cause crashes if Postgres server rejects the string as invalid...