pg_dump Code Execution

The vulnerability of the pgdump utility in the PostgreSQL database management system is related to the inclusion of functions from an unverified and uncontrolled area. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

CVE-2017-16082

CVE-2017-16082 Overview Affected versions of pg contain a remote code execution vulnerability that occurs when the remote database or query specifies a crafted column name. There are two specific scenarios in which it is likely for an application to be vulnerable: 1. The application executes...

PT-2026-129077

PostgreSQL Anonymizer contains a vulnerability related to static masking and statistics persistence. Statistics pertaining to the original data remain visible in pg stats until an ANALYZE operation is performed on the table, either manually or by autovacuum. This issue is fixed in PostgreSQL...

CLEANSTART-2026-RJ56539 spdystream is a Go library for multiplexing streams over SPDY connections

Security vulnerability affects the cloudnative-pg-fips package. spdystream is a Go library for multiplexing streams over SPDY connections...

CLEANSTART-2026-VN81441 Security fix for GHSA-j88v-2chj-qfwx applied in: cloudnative-pg-fips 1.29.0-r0

Security vulnerability affects the cloudnative-pg-fips package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-SD27906 Memory-safety vulnerability in github

Security vulnerability affects the cloudnative-pg-fips package. Memory-safety vulnerability in github...

PT-2026-117466

NocoBase @nocobase/plugin-collection-sql through 2.2.28 contains an SQL injection vulnerability that allows privileged users to store unvalidated SQL by bypassing checkSQL through the sqlCollection:setFields action. Attackers holding the collection-sql snippet can replace a benign collection quer...

CVE-2026-103223

A flaw was found in vertx-pg-client. A malicious, compromised, or intermediary database server can trigger a Denial of Service DoS condition by sending a message header containing an excessively large length value before authentication completes. Because the client does not properly validate the...

Astra Linux - vulnerability in linux

In the Linux kernel, the following vulnerability has been resolved: NFS: Do not corrupt the value of pgbyteswritten in nfsdorecoalesce The value of mirror-pgbyteswritten should only be updated after a successful attempt to flush out the requests on the list...

CVE-2026-102463

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the binary array decoder in vertx-pg-client DataTypeCodec.binaryDecodeArray allocates a Java array sized by a server-declared 32-bit dimension count with no upper bound. A malicious or compromised PostgreSQL...

CVE-2026-103223

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...

CVE-2026-103223

The io.vertx:vertx-pg-client component in Eclipse Vert.x versions [4.0.0, 4.5.34], [5.0.0, 5.0.12], [5.1.0, 5.1.9], and [5.2.0, 5.2.0] is vulnerable to an out-of-memory crash. The PostgreSQL message decoder fails to validate the 4-byte message length field from the PostgreSQL wire protocol. A mal...

CVE-2026-103223

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...

CVE-2026-103223

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...

codes.rafael.task:task-processor-jdbc (1.10), com.datasqrl:sqrl-discovery (>=0.7.0, <=0.11.5) +52 more potentially affected by CVE-2026-103223 via io.vertx:vertx-pg-client (>=5.0.0, <=5.1.8)

io.vertx:vertx-pg-client MAVEN version =5.0.0, =0.7.0, =0.7.0, =0.7.0, =0.6.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =2.24.2, =2.4.0-rc1, =3.0.0 and more Source cves: CVE-2026-103223 Source advisory: MEND:CVE-2026-103223...

EUVD-2026-101956

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...

CVE-2026-103223

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...

CVE-2026-103223

In Eclipse Vert.x versions 4.0.0, 4.5.34 or 5.0.0,5.0.12 or 5.1.0,5.1.9 or 5.2.0, 5.2.0, the PostgreSQL message decoder reads the 4-byte message length field from the PostgreSQL wire protocol without any maximum validation. A malicious, compromised, or man-in-the-middle PostgreSQL server can send...

ai.pipestream:connector-admin-service (0.1.18), ai.pipestream:pipestream-engine (0.0.6) +224 more potentially affected by CVE-2026-103223 via io.vertx:vertx-pg-client (>=3.8.0, <=4.5.34)

io.vertx:vertx-pg-client MAVEN version =3.8.0, =0.1.25, =0.0.1-v20250610200556, =0.0.10, =1.2, =0.3.1.2, =0.3.1.2, =0.6.0.0, =0.1.0, =0.1.0, =0.4.0.1, =0.8.3.0 and more Source cves: CVE-2026-103223 Source advisory: MEND:CVE-2026-103223...

com.datasqrl:sqrl-discovery (>=0.10.6, <=0.11.5), com.datasqrl:sqrl-planner (>=0.10.6, <=0.11.5) +32 more potentially affected by CVE-2026-102463 via io.vertx:vertx-pg-client (>=5.1.0, <=5.1.9)

io.vertx:vertx-pg-client MAVEN version =5.1.0, =0.10.6, =0.10.6, =0.10.6, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =0.1.0, =18.0.0-rc1, =1.11.0, =1.11.0, =1.0.0, =1.0.7 and more Source cves: CVE-2026-102463 Source advisory: MEND:CVE-2026-102463...