CVE-2026-61818

pgpartman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undopartition reads partconfig.timeencoder as unrestricted text and interpolates it without identifier quoting into a dynamically executed SELECT statement. A role with partmanuser access can store...

CVE-2026-61818

pg_partman , a PostgreSQL extension for managing partitioned tables, is affected by an SQL injection in the undo_partition() function. Prior to version 5.5.0 , the function reads part_config.time_encoder as unrestricted text and interpolates it without identifier quoting into a dynamically execut...