The vulnerability of the pg_dump utility in the PostgreSQL database management system allows a hacker to execute arbitrary code.

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory

A flaw was found in PostgreSQL libpq. A server superuser can exploit a buffer overflow vulnerability in the PQfn function, which is used by client functions such as loexport, loread, lolseek64, and lotell64. This allows the superuser to send an arbitrarily large response, overwriting the client's...

CLEANSTART-2026-ZN81480 Security fixes in cloudnative-pg 1.29.1-r2

Package cloudnative-pg version 1.29.1-r2 fixes 7 vulnerabilities: CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502...

CLEANSTART-2026-RE09633 Security fixes in cloudnative-pg-fips 1.27.3-r1

Package cloudnative-pg-fips version 1.27.3-r1 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-KJ92052 Security fixes in cloudnative-pg-fips 1.28.1-r2

Package cloudnative-pg-fips version 1.28.1-r2 fixes 8 vulnerabilities: CVE-2026-33810, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282...

CLEANSTART-2026-LG47760 Security fixes in cloudnative-pg-fips 1.28.1-r1

Package cloudnative-pg-fips version 1.28.1-r1 fixes 1 vulnerabilities: CVE-2026-33186...

CLEANSTART-2026-LP67561 Security fixes in cloudnative-pg-fips 1.26.3-r0

Package cloudnative-pg-fips version 1.26.3-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-AG86190 Security fixes in cloudnative-pg 1.29.2-r0

Package cloudnative-pg version 1.29.2-r0 fixes 2 vulnerabilities: CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-HX59115 Security fixes in cloudnative-pg-fips 1.27.3-r2

Package cloudnative-pg-fips version 1.27.3-r2 fixes 8 vulnerabilities: CVE-2026-33810, CVE-2026-27140, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282...

CLEANSTART-2026-CX91611 Security fixes in cloudnative-pg-fips 1.26.3-r3

Package cloudnative-pg-fips version 1.26.3-r3 fixes 9 vulnerabilities: CVE-2026-33811, CVE-2026-33814, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825...

CLEANSTART-2026-IE71566 Security fixes in cloudnative-pg-fips 1.25.4-r0

Package cloudnative-pg-fips version 1.25.4-r0 fixes 5 vulnerabilities: CVE-2025-47913, CVE-2025-58181, CVE-2025-47914, CVE-2025-61729, CVE-2025-61727...

CLEANSTART-2026-LW15803 Security fixes in cloudnative-pg 1.27.4-r1

Package cloudnative-pg version 1.27.4-r1 fixes 5 vulnerabilities: CVE-2026-46600, CVE-2026-56852, ghsa-hrxh-6v49-42gf, CVE-2026-39822, CVE-2026-42505...

CLEANSTART-2026-ZZ97950 Security fixes in cloudnative-pg-fips 1.25.4-r2

Package cloudnative-pg-fips version 1.25.4-r2 fixes 4 vulnerabilities: CVE-2026-33186, CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-ZG46602 Security fixes in cloudnative-pg-fips 1.28.1-r0

Package cloudnative-pg-fips version 1.28.1-r0 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...

CLEANSTART-2026-DI33863 Security fixes in cloudnative-pg-fips 1.27.4-r0

Package cloudnative-pg-fips version 1.27.4-r0 fixes 3 vulnerabilities: CVE-2026-33816, ghsa-j88v-2chj-qfwx, CVE-2026-35469...

CLEANSTART-2026-KI68145 Security fixes in cloudnative-pg 1.26.3-r1

Package cloudnative-pg version 1.26.3-r1 fixes 10 vulnerabilities: ghsa-xgrm-4fwx-7qm8, ghsa-9jj7-4m8r-rfcm, CVE-2026-33815, CVE-2026-33816, ghsa-j88v-2chj-qfwx...

CLEANSTART-2026-CI73950 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502, CVE-2026-42506 applied in versions: 1.29.1-r0

Multiple security vulnerabilities affect the cloudnative-pg package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RR10818 Security fixes for CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-42502, CVE-2026-42506 applied in versions: 1.29.1-r0

Multiple security vulnerabilities affect the cloudnative-pg package. These issues are resolved in later releases. See references for individual vulnerability details...

CVE-2026-54760 Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.1, the SQLChatAgent SQL-injection mitigation, with default allowdangerousoperations=False, combines a raw-text regex blocklist DANGEROUSSQLPATTERNS with a sqlglot SELECT-only statement allowlist...

CVE-2026-54760 Langroid: SQLChatAgent dangerous-function blocklist can be bypassed with quoted or schema-qualified pg_read_file calls

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.65.1, the SQLChatAgent SQL-injection mitigation, with default allowdangerousoperations=False, combines a raw-text regex blocklist DANGEROUSSQLPATTERNS with a sqlglot SELECT-only statement allowlist...