CVE-2026-14662

Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These...

EUVD-2026-57831

Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These...

CVE-2026-14662

The CVE-2026-14662 entry describes an integer wraparound in PostgreSQL tsvector/tsquery data type functions, allowing an unprivileged database user to cause undersized allocations and out-of-bounds writes via crafted inputs. Consequences stated include potential arbitrary code execution as the op...

CVE-2026-14662 PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound

Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may execute arbitrary code as the operating system user running the database. These...

CVE-2026-14662

Integer wraparound in PostgreSQL tsvector and tsquery data type functi...

Vulnerability in core server (CVE-2026-14662)

PostgreSQL tsvector and tsquery undersize allocations, via integer wraparound Integer wraparound in PostgreSQL tsvector and tsquery data type functions allows an unprivileged database user to cause the server to undersize an allocation and write out-of-bounds, via crafted large inputs. This may...

CVE-2026-73069

Twenty open-source CRM contains a SQL injection in the searchVector field configuration prior to version 2.15.0. A workspace administrator with DATA_MODEL permission could supply settings.asExpression for the system TS_VECTOR field via PATCH /rest/metadata/fields/:id or the updateOneField GraphQL...