PT-2026-95646

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The extension manages partitioned tables by time or ID. The functions run maintenance, show partitions, show partition info, undo partition, and partition data time interpolate the writable part...

PT-2026-95651

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The run maintenance function handles exceptions outside the loop that processes rows from part config. Consequently, an exception triggered by one partition set terminates the loop immediately,...

PT-2026-95650

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description pg partman is a PostgreSQL extension used for managing partitioned tables by time or ID. The functions drop partition id and drop partition time utilize part config.retention schema as the target...

PT-2026-95648

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description When pg jobmon is installed and part config.jobmon is set to true, exception handlers in several functions place the p parent table variable verbatim into a SQL string literal used to call the pg...

PT-2026-95645

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The create partition time function reads the time encoder value from the part config table and interpolates it into a dynamically executed SELECT statement without proper identifier quoting. A use...

PT-2026-95647

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The undo partition function reads the time encoder variable from the part config table as unrestricted text and interpolates it into a dynamically executed SELECT statement without identifier...

PT-2026-95649

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 5.5.0 Description The inherit template properties function manually surrounds primary-key column names from pg attribute.attname with double quotes without escaping embedded double-quote characters. A user with...

PostgreSQL Remote Code Execution Vulnerability (CNVD-2021-37590)

PostgreSQL is a free object-relational database management system organized by Postgresql. The system supports most of the SQL standards and provides many other features, such as foreign keys, triggers, views, etc. A remote code execution vulnerability exists in the pg partman extension in...

DEBIAN-CVE-2021-33204

In the pgpartman aka PG Partition Manager extension before 4.5.1 for PostgreSQL, arbitrary code execution can be achieved via SECURITY DEFINER functions because an explicit searchpath is not set...

CVE-2021-33204

In the pgpartman aka PG Partition Manager extension before 4.5.1 for PostgreSQL, arbitrary code execution can be achieved via SECURITY DEFINER functions because an explicit searchpath is not set...

PT-2021-4285

Name of the Vulnerable Software and Affected Versions pg partman versions prior to 4.5.1 Description The issue allows for arbitrary code execution via SECURITY DEFINER functions due to the lack of an explicit search path setting. This can potentially enable a remote attacker to access confidentia...