6 matches found
CVE-2026-61817 pg_partman privilege escalation via SQL injection in several functions via time decoder
pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, runmaintenance, showpartitions, showpartitioninfo, undopartition, and partitiondatatime interpolate the writable partconfig.timedncoder text value without identifier quoting into dynamic SQL. A role...
EUVD-2026-83430
pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, runmaintenance, showpartitions, showpartitioninfo, undopartition, and partitiondatatime interpolate the writable partconfig.timedncoder text value without identifier quoting into dynamic SQL. A role...
CVE-2026-61817
pg_partman is a PostgreSQL extension for managing partitioned tables by time or ID. Prior to 5.5.0 , the functions run_maintenance() , show_partitions() , show_partition_info() , undo_partition() , and partition_data_time() interpolate the writable part_config.time_dncoder text value without iden...
CVE-2026-61817 pg_partman privilege escalation via SQL injection in several functions via time decoder
pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, runmaintenance, showpartitions, showpartitioninfo, undopartition, and partitiondatatime interpolate the writable partconfig.timedncoder text value without identifier quoting into dynamic SQL. A role...
CVE-2026-61817
pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, runmaintenance, showpartitions, showpartitioninfo, undopartition, and partitiondatatime interpolate the writable partconfig.timedncoder text value without identifier quoting into dynamic SQL. A role...
CVE-2026-61817 pg_partman privilege escalation via SQL injection in several functions via time decoder
pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, runmaintenance, showpartitions, showpartitioninfo, undopartition, and partitiondatatime interpolate the writable partconfig.timedncoder text value without identifier quoting into dynamic SQL. A role...