EUVD-2021-28576

Malicious code in bioql PyPI...

CVE-2021-41558

The CVE-2021-41558 entry concerns the set_user extension module for PostgreSQL, affected in versions before 3.0.0. The root cause is a bypass of the ProcessUtility_hook via set_config, enabling an unintended execution path. The vulnerability is described as allowing a bypass with potential elevat...