Llama-Stack-0.4.0rc3-local-CVE-2026-25211

Llama Stack pgvector Password Leak PoC CVE-2026-25211 Local Proof-of-Concept demonstrating plaintext database password exposure in initialization logs of llama-stack versions 0.4.0rc3. Overview In affected versions of llama-stack before 0.4.0rc3, when using the pgvector vector store provider, the...

RLSA-2026:88360 Important: postgresql18-pgvector security update

Open-source vector similarity search for Postgres. Supports L2 distance, inner product, and cosine distance Security Fixes: pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 For more details about the security issues, including the...

postgresql18-pgvector security update

An update is available for postgresql18-pgvector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Open-source vector similarity search for Postgres. Supports L2...

postgresql16-pgvector security update

An update is available for postgresql16-pgvector. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list Open-source vector similarity search for Postgres. Supports L2...

RLSA-2026:88359 Important: postgresql16-pgvector security update

Open-source vector similarity search for Postgres. Supports L2 distance, inner product, and cosine distance Security Fixes: pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 For more details about the security issues, including the...

Important: Red Hat Security Advisory: postgresql16-pgvector security update

An update for postgresql16-pgvector is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build

A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...

Important: Red Hat Security Advisory: postgresql18-pgvector security update

An update for postgresql18-pgvector is now available for Red Hat Enterprise Linux 10.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, i...

pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build

A flaw was found in pgvector. An authenticated database user can trigger an out-of-bounds write during an Inverted File Flat IVFFlat index build operation. This vulnerability may allow the attacker to achieve arbitrary code execution or cause a crash resulting in a denial of service on the databa...

CVE-2026-87936

Improper Neutralization of Special Elements used in an SQL Command 'SQL Injection' vulnerability in Drupal amazee.ai Private AI Provider allows SQL Injection. This issue affects amazee.ai Private AI Provider versions: from 0.0.0 to 1.3.7, from 1.4.0 to 1.4.3...

SUSE SLES15: pgvector-devel / postgresql16-pgvector / postgresql17-pgvector / etc (SUSE-SU-2026:4804-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:4804-1 advisory. This update for pgvector fixes the following issue: - CVE-2026-103484: database users with the ability to create an IVFFlat index can write...

Security update for pgvector

This update for pgvector fixes the following issue: CVE-2026-103484: database users with the ability to create an IVFFlat index can write data out-of-bounds, which can lead to arbitrary code execution bsc1284129. Changes for pgvector: Updated to version 0.8.7 Patch Instructions: To install this...

Rocky Linux 9 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc (crlsa-2026_85791)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685791 advisory. pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 Tenable has extracted the preceding description blo...

AlmaLinux 9 : postgresql:16 (ALSA-2026:85791)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:85791 advisory. pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 Tenable has extracted the preceding description...

AlmaLinux 9 : postgresql:18 (ALSA-2026:85814)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2026:85814 advisory. pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 Tenable has extracted the preceding description...

RockyLinux 9 : postgresql:18 (RLSA-2026:85814)

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:85814 advisory. pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 Tenable has extracted the preceding description...

Rocky Linux 9 [CIQ] Security Update: pg_repack / pg_repack-debuginfo / pg_repack-debugsource / pgaudit / etc (crlsa-2026_85814)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-202685814 advisory. pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 Tenable has extracted the preceding description blo...

postgresql:16 security update

An update is available for postgresql, postgres-decoderbufs, module.pgrepack, postgis, module.postgresql, module.postgis, module.pgvector, pgvector, pgrepack, module.postgres-decoderbufs, module.pgaudit, pgaudit. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base...

postgresql:18 security update

An update is available for postgresql, postgres-decoderbufs, module.pgrepack, postgis, module.postgresql, module.postgis, module.pgvector, pgvector, pgrepack, module.postgres-decoderbufs, module.pgaudit, pgaudit. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base...

RLSA-2026:85814 Important: postgresql:18 security update

PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: pgvector: pgvector: Arbitrary code execution via out-of-bounds write during IVFFlat index build CVE-2026-103484 For more details about the security issues, including the impact, a CVSS score,...