15784 matches found
CVE-2026-76848 TypeORM 0.2.21 through 1.1.0 SQL Injection via SelectQueryBuilder.distinctOn
TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validation. For PostgreSQL-family drivers, createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins that array and interpolates the result into the generated...
CVE-2026-76848
CVE-2026-76848 targets TypeORM , specifically the SelectQueryBuilder.distinctOn function used with PostgreSQL-family drivers . The root cause is that createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins the input array and interpolates it directly into the generated SEL...
EUVD-2026-64853
TypeORM's SelectQueryBuilder.distinctOn accepts an array of strings and stores it on the expression map without validation. For PostgreSQL-family drivers, createSelectDistinctExpression in src/query-builder/SelectQueryBuilder.ts joins that array and interpolates the result into the generated...
Astra Linux – Vulnerability in PostgresSQL 11
A flaw was discovered in PostgreSQL that allows authenticated database users to execute arbitrary code through insufficient overflow checks during SQL array value modifications. This issue arises due to an integer overflow during array modifications, where a remote user can trigger the overflow b...
Astra Linux – Vulnerability in PostgresSQL 11
The Time-of-Check Time-of-Use TOCTOU race condition in pgdump in PostgreSQL allows an object creator to execute arbitrary SQL functions while the user running pgdump is a superuser. The attack involves replacing another relation type with a view or foreign table. The attack requires waiting for...
Astra Linux – Vulnerability in Rails
The PostgreSQL adapter in Active Record before versions 6.1.2.1, 6.0.3.5, and 5.2.4.5 is vulnerable to a regular expression denial of service REDoS vulnerability. Carefully crafted inputs can cause the input validation for the money type in the PostgreSQL adapter in Active Record to spend too muc...
Astra Linux – Vulnerability in PHP 8.1
In PHP versions 8.1. before 8.1.34, 8.2. before 8.2.30, 8.3. before 8.3.29, 8.4. before 8.4.16, and 8.5. before 8.5.1, when using the PDO PostgreSQL driver with PDO::ATTREMULATEPREPARES enabled, an invalid character sequence such as \x99 in a prepared statement parameter may cause the quoting...
Astra Linux – Vulnerability in PostgresSQL 11
A memory disclosure vulnerability was discovered in PostgreSQL that allows remote users to access sensitive information by exploiting certain aggregate function calls with ‘unknown’-type arguments. Handling ‘unknown’-type values from string literals without type designation can reveal bytes,...
Exploit for Inefficient Regular Expression Complexity in Koajs Koa
Patch: CVE-2025-25200 Vulnerability Details - CVE: CVE...
postgresql17-17.11-1.1 on GA media (moderate)
postgresql17-17.11-1.1 on GA media Announcement ID: openSUSE-SU-2026:11555-1 Rating: moderate Cross-References: CVE-2026-14662 CVE-2026-14663 CVE-2026-14664 CVE-2026-14666 CVE-2026-14668 CVE-2026-14669 CVE-2026-14670 CVE-2026-14671 CVE-2026-14672 CVE-2026-14677 CVE-2026-14678 CVE-2026-14679...
ROOT-OS-DEBIAN-11-CVE-2026-14669 CVE-2026-14669 in postgresql-13 - Patched by Root
Root has patched CVE-2026-14669 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-15742 CVE-2026-15742 in postgresql-13 - Patched by Root
Root has patched CVE-2026-15742 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-6464 CVE-2026-6464 in postgresql-13 - Patched by Root
Root has patched CVE-2026-6464 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-14668 CVE-2026-14668 in postgresql-13 - Patched by Root
Root has patched CVE-2026-14668 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-14671 CVE-2026-14671 in postgresql-13 - Patched by Root
Root has patched CVE-2026-14671 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-14662 CVE-2026-14662 in postgresql-13 - Patched by Root
Root has patched CVE-2026-14662 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-16239 CVE-2026-16239 in postgresql-13 - Patched by Root
Root has patched CVE-2026-16239 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...
ROOT-OS-DEBIAN-11-CVE-2026-14670 CVE-2026-14670 in postgresql-13 - Patched by Root
Root has patched CVE-2026-14670 in the postgresql-13 package for Root:Debian:11. Multiple fixed versions available...