BIT-PARSE-2026-32234 Parse Server has a SQL injection via query field name when using PostgreSQL

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0 and 8.6.36, an attacker with access to the master key can inject malicious SQL via crafted field names used in query constraints when Parse Server is configured with PostgreSQL a...

BIT-PARSE-2026-31871 Parse Server has a SQL Injection via dot-notation sub-key name in `Increment` operation on PostgreSQL

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0 and 8.6.31, a SQL injection vulnerability exists in the PostgreSQL storage adapter when processing Increment operations on nested object fields using dot notation e.g.,...

BIT-PARSE-2026-31856 Parse Server has a SQL injection via `Increment` operation on nested object field in PostgreSQL

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. A SQL injection vulnerability exists in the PostgreSQL storage adapter when processing Increment operations on nested object fields using dot notation e.g., stats.counter. The amount value is...

BIT-PARSE-2026-31840 Parse Server has a SQL injection via dot-notation field name in PostgreSQL

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. Prior to 9.6.0 and 8.6.28, an attacker can use a dot-notation field name in combination with the sort query parameter to inject SQL into the PostgreSQL database through an improper escaping of...

RHSA-2026:4548 Red Hat Security Advisory: postgresql:15 security update

Bulletin has no description...

RHSA-2026:4546 Red Hat Security Advisory: postgresql:15 security update

Bulletin has no description...

RHSA-2026:4547 Red Hat Security Advisory: postgresql:16 security update

Bulletin has no description...

RHSA-2026:4544 Red Hat Security Advisory: postgresql:16 security update

Bulletin has no description...

RHSA-2026:4528 Red Hat Security Advisory: postgresql security update

Bulletin has no description...

RHSA-2026:4524 Red Hat Security Advisory: postgresql security update

Bulletin has no description...

RHSA-2026:4518 Red Hat Security Advisory: postgresql security update

Bulletin has no description...

RHSA-2026:4516 Red Hat Security Advisory: postgresql:13 security update

Bulletin has no description...

RHSA-2026:4515 Red Hat Security Advisory: postgresql:15 security update

Bulletin has no description...

RHSA-2026:4509 Red Hat Security Advisory: postgresql:12 security update

Bulletin has no description...

RHSA-2026:4506 Red Hat Security Advisory: postgresql:12 security update

Bulletin has no description...

RHSA-2026:4505 Red Hat Security Advisory: postgresql:12 security update

Bulletin has no description...

RHSA-2026:4504 Red Hat Security Advisory: postgresql:13 security update

Bulletin has no description...

RHSA-2026:4475 Red Hat Security Advisory: postgresql security update

Bulletin has no description...

RHSA-2026:4441 Red Hat Security Advisory: postgresql16 security update

Bulletin has no description...

RHEL 9 : postgresql:16 (RHSA-2026:4547)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:4547 advisory. PostgreSQL is an advanced object-relational database management system DBMS. Security Fixes: postgresql: PostgreSQL oidvector discloses a fe...