Lucene search
+L

2 matches found

OSV
OSV
added 2025/09/19 2:49 p.m.11 views

CLSA-2025-1758293394 postgresql: Fix of 2 CVEs

CVE-2025-8714: prevent execution of unsafe meta-commands in plain-text dumps pgdump/pgrestore/pgdumpall, psql restricted mode - CVE-2025-8715: sanitize newlines in object names to avoid unsafe SQL comments in dumps...

8.8CVSS6AI score0.00736EPSS
SaveExploits1References1
Snyk
Snyk
added 2025/08/14 1:0 p.m.6 views

Inclusion of Functionality from Untrusted Control Sphere

Overview Affected versions of this package are vulnerable to Inclusion of Functionality from Untrusted Control Sphere when restoring from a plain-text dump file. An attacker can embed malicious psql meta-commands into dump files generated by pgdump --format=plain, pgdumpall, or pgrestore --file...

8.8CVSS7.7AI score0.00736EPSS
SaveExploits1References2
Rows per page
Query Builder