EUVD-2026-54182

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read in the Dictionary compression reverse row iterator tsl/src/compression/algorithms/dictionary.c. The forward path validates the decoded index; the reverse path uses an assertion compiled out of release builds,...

EUVD-2026-54179

TimescaleDB through 2.29.1, fixed in commit 517c13e, contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator that allows authenticated attackers to cause a denial of service by storing a crafted compressed datum with an internally inconsistent BitArray...

CVE-2026-70634

TimescaleDB 2.29.1 contains an out-of-bounds read in the Dictionary compression reverse row iterator (tsl/src/compression/algorithms/dictionary.c). The reverse path does not validate the 64-bit Simple8b index (an assertion is compiled out in release builds); attackers with DML access to a physica...

CVE-2026-70633

TimescaleDB up to version 2.29.1 contains an out-of-bounds read vulnerability in the Gorilla compression reverse row iterator. According to the CVE entry, an authenticated attacker with DML access to a compressed hypertable can craft a datum with an internally inconsistent BitArray, causing an un...