CVE-2026-56851 vulnerabilities

Vulnerabilities for packages: timescaledb-parallel-copy-fips, typescript, ldap2pg, tigera-operator, grafana-fips, ldap2pg-fips, kube-state-metrics, kube-bench-fips, backup-restore-operator, commercial-gitlab-workhorse-ee-fips, timescaledb-parallel-copy, vault-fips, grafana,...

GO-2026-6629 vulnerabilities

Vulnerabilities for packages: timescaledb-parallel-copy-fips, typescript, ldap2pg, tigera-operator, grafana-fips, ldap2pg-fips, kube-state-metrics, kube-bench-fips, backup-restore-operator, commercial-gitlab-workhorse-ee-fips, timescaledb-parallel-copy, vault-fips, grafana,...

GHSA-GX9W-9QQ8-M485 vulnerabilities

Vulnerabilities for packages: timescaledb-parallel-copy-fips, typescript, ldap2pg, tigera-operator, grafana-fips, ldap2pg-fips, kube-state-metrics, kube-bench-fips, backup-restore-operator, commercial-gitlab-workhorse-ee-fips, timescaledb-parallel-copy, vault-fips, grafana,...

GO-2026-6629 vulnerabilities

Vulnerabilities for packages: grafana, timescaledb-parallel-copy, trino, ingress-nginx-controller, kube-bench, typescript...

GHSA-GX9W-9QQ8-M485 vulnerabilities

Vulnerabilities for packages: grafana, timescaledb-parallel-copy, trino, ingress-nginx-controller, kube-bench, typescript...

CVE-2026-56851 vulnerabilities

Vulnerabilities for packages: grafana, timescaledb-parallel-copy, trino, ingress-nginx-controller, kube-bench, typescript...

CVE-2026-70633

A flaw was found in TimescaleDB. An authenticated attacker with data manipulation language DML access to a compressed hypertable could exploit an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator. By storing a specially crafted compressed data entry with an internal...

CVE-2026-70635

A flaw was found in TimescaleDB. Authenticated attackers with direct data manipulation language DML access to a compressed hypertable can exploit an out-of-bounds read vulnerability. By supplying a specially crafted Simple8b selector-11 value, attackers can bypass index validation checks during...

CVE-2026-70634

A flaw was found in TimescaleDB. An out-of-bounds read vulnerability exists in the Dictionary compression reverse row iterator. Attackers with Data Manipulation Language DML access to a physical compressed database table can store specially crafted data. By performing a reverse-order scan, this...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: nri-memcached, delve, grafana-rollout-operator, terraform, polaris, ini-file, rabbitmq-cluster-operator, gobump, neuvector-sigstore-interface, fzf, ko, clickhouse-operator, kapp, kube-logging-operator, wait-for-port, render-template, kpt, cilium-cli, containerd,...

SUSE CVE-2026-70633

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storing a crafted compressed datum with an internally inconsistent BitArray...

SUSE CVE-2026-70634

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator tsl/src/compression/algorithms/dictionary.c. The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds,...

SUSE CVE-2026-70635

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...

EUVD-2026-54183

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...

EUVD-2026-54182

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator tsl/src/compression/algorithms/dictionary.c. The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds,...

EUVD-2026-54179

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storing a crafted compressed datum with an internally inconsistent BitArray...

CVE-2026-70635

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...

CVE-2026-70634

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator tsl/src/compression/algorithms/dictionary.c. The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds,...

CVE-2026-70633

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storing a crafted compressed datum with an internally inconsistent BitArray...

CVE-2026-70635 TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability that allows authenticated attackers to cause query-result integrity failures or backend crashes by supplying a crafted Simple8b selector-11 value, which is stored in the signed int16 Arrow...