176 matches found
UBUNTU-CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172
CVE-2026-3172 describes a buffer overflow in the parallel HNSW index build of pgvector versions 0.6.0 through 0.8.1. The flaw allows a database user to leak sensitive data from other relations or crash the database server. Affected component: pgvector’s parallel HNSW index construction. Root caus...
CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172 pgvector buffer overflow in parallel HNSW index build
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172 pgvector buffer overflow in parallel HNSW index build
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
CVE-2026-3172 pgvector buffer overflow in parallel HNSW index build
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
PT-2026-22023
Name of the Vulnerable Software and Affected Versions pgvector versions 0.6.0 through 0.8.1 Description A buffer overflow exists in the parallel HNSW index build process within pgvector versions 0.6.0 through 0.8.1. This issue allows a database user to potentially leak sensitive data from other...
pgvector security vulnerability
pgvector is an open-source Postgres vector similarity search tool developed by pgvector. Versions 0.6.0 to 0.8.1 of pgvector contain security vulnerabilities. These vulnerabilities stem from buffer overflows during the parallel HNSW index construction process, which could lead to data leaks or...
CVE-2026-3172: Integer Underflow (Wrap or Wraparound)
Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server...
SUSE SLES16 Security Update : postgresql17 and postgresql18 (SUSE-SU-2026:20194-1)
The remote SUSE Linux SLES16 / SLESSAP16 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2026:20194-1 advisory. Changes in postgresql17, postgresql18: Update to 17.7: https://www.postgresql.org/about/news/p-3171/...
Exploit for CVE-2026-25211
Llama Stack pgvector Password Leak PoC CVE-2026-25211 Loc...
GHSA-XMFJ-7PP5-FXR6 Llama Stack exposes secret in initialization log
Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...
Llama Stack exposes secret in initialization log
Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...
Insertion of Sensitive Information into Log File
Overview llama-stack is a Llama Stack Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File via the pgvector.py component. An attacker can obtain sensitive information by accessing log files that contain uncensored credentials. Remediation Upgrade...
CVE-2026-25211
Llama Stack aka llama-stack before 0.4.0rc3 does not censor the pgvector password in the initialization log...