postgresql: PostgreSQL CREATE TYPE does not check multirange schema CREATE privilege

A flaw was found in PostgreSQL CREATE TYPE handling for multirange types. The database failed to properly verify schema CREATE privileges during multirange type creation. An authenticated database user could exploit this issue to hijack queries that rely on searchpath resolution for user-defined ...

JLSEC-2026-600

Missing authorization in PostgreSQL CREATE TYPE allows an object creator to hijack other queries that use searchpath to find user-defined types, including extension-defined types. That is to say, the victim will execute arbitrary SQL functions of the attacker's choice. Versions before PostgreSQL...

Apache Impala log information leakage vulnerability

Apache Impala is a large-scale, distributed parallel processing database query system of the United States Apache Apache Foundation. The system is capable of querying petabytes of big data stored in HDFS Distributed File System and HBase database in Hadoop big data analytics software. A log...