| CVE-2026-111943 | HIGH | py3-pip-wheel | 26.2.2-r0 | 26.2.2-r2 | crypto/x509: golang: crypto/x509: Man-in-the-middle attacks via untrusted intermediate certificates |
| CVE-2026-114613 | HIGH | py3-pip-wheel | 26.2.2-r0 | 26.2.2-r1 | msgpack: msgpack: Denial of Service via memory leak during map deserialization |
| CVE-2026-14662 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions |
| CVE-2026-14662 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions |
| CVE-2026-14662 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions |
| CVE-2026-14662 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions |
| CVE-2026-14662 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions |
| CVE-2026-14662 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions |
| CVE-2026-14662 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via integer wraparound in tsvector and tsquery functions |
| CVE-2026-14664 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp |
| CVE-2026-14664 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp |
| CVE-2026-14664 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp |
| CVE-2026-14664 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp |
| CVE-2026-14664 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp |
| CVE-2026-14664 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp |
| CVE-2026-14664 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via heap buffer overflow in regexp |
| CVE-2026-14668 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator |
| CVE-2026-14668 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator |
| CVE-2026-14668 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator |
| CVE-2026-14668 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator |
| CVE-2026-14668 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator |
| CVE-2026-14668 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator |
| CVE-2026-14668 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via type confusion in ctid selectivity estimator |
| CVE-2026-14669 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation |
| CVE-2026-14669 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation |
| CVE-2026-14669 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation |
| CVE-2026-14669 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation |
| CVE-2026-14669 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation |
| CVE-2026-14669 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation |
| CVE-2026-14669 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via long POSIX timezone abbreviation |
| CVE-2026-14670 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow |
| CVE-2026-14670 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow |
| CVE-2026-14670 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow |
| CVE-2026-14670 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow |
| CVE-2026-14670 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow |
| CVE-2026-14670 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow |
| CVE-2026-14670 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via plperl tied hash heap buffer overflow |
| CVE-2026-14671 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module |
| CVE-2026-14671 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module |
| CVE-2026-14671 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module |
| CVE-2026-14671 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module |
| CVE-2026-14671 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module |
| CVE-2026-14671 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module |
| CVE-2026-14671 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in 'refint' module |
| CVE-2026-14677 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl |
| CVE-2026-14677 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl |
| CVE-2026-14677 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl |
| CVE-2026-14677 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl |
| CVE-2026-14677 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl |
| CVE-2026-14677 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl |
| CVE-2026-14677 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: pltcl: plperl: PostgreSQL: Arbitrary code execution in 32-bit pltcl and plperl |
| CVE-2026-14679 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation |
| CVE-2026-14679 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation |
| CVE-2026-14679 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation |
| CVE-2026-14679 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation |
| CVE-2026-14679 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation |
| CVE-2026-14679 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation |
| CVE-2026-14679 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Stack buffer overflow via OUT parameter count manipulation |
| CVE-2026-14680 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments |
| CVE-2026-14680 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments |
| CVE-2026-14680 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments |
| CVE-2026-14680 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments |
| CVE-2026-14680 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments |
| CVE-2026-14680 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments |
| CVE-2026-14680 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion with "internal" arguments |
| CVE-2026-15741 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse |
| CVE-2026-15741 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse |
| CVE-2026-15741 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse |
| CVE-2026-15741 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse |
| CVE-2026-15741 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse |
| CVE-2026-15741 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse |
| CVE-2026-15741 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Privilege escalation via SQL injection in EXTRACT() deparse |
| CVE-2026-15742 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound |
| CVE-2026-15742 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound |
| CVE-2026-15742 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound |
| CVE-2026-15742 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound |
| CVE-2026-15742 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound |
| CVE-2026-15742 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound |
| CVE-2026-15742 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql-fuzzystrmatch: PostgreSQL fuzzystrmatch: Arbitrary code execution via integer wraparound |
| CVE-2026-16239 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle |
| CVE-2026-16239 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle |
| CVE-2026-16239 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle |
| CVE-2026-16239 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle |
| CVE-2026-16239 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle |
| CVE-2026-16239 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle |
| CVE-2026-16239 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via type confusion in cursor lifecycle |
| CVE-2026-18408 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump |
| CVE-2026-18408 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump |
| CVE-2026-18408 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump |
| CVE-2026-18408 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump |
| CVE-2026-18408 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump |
| CVE-2026-18408 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump |
| CVE-2026-18408 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via untrusted data inclusion in pg_dump |
| CVE-2026-19385 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists |
| CVE-2026-19385 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists |
| CVE-2026-19385 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists |
| CVE-2026-19385 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists |
| CVE-2026-19385 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists |
| CVE-2026-19385 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists |
| CVE-2026-19385 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pg_dump: Arbitrary code execution via crafted transform lists |
| CVE-2026-6464 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN |
| CVE-2026-6464 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN |
| CVE-2026-6464 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN |
| CVE-2026-6464 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN |
| CVE-2026-6464 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN |
| CVE-2026-6464 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN |
| CVE-2026-6464 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL psql: Arbitrary command execution via untrusted data in COPY FROM STDIN |
| CVE-2026-6471 | HIGH | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin |
| CVE-2026-6471 | HIGH | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin |
| CVE-2026-6471 | HIGH | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin |
| CVE-2026-6471 | HIGH | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin |
| CVE-2026-6471 | HIGH | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin |
| CVE-2026-6471 | HIGH | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin |
| CVE-2026-6471 | HIGH | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Arbitrary code execution via logical decoding plugin |
| CVE-2026-114583 | MEDIUM | python-3.13 | 3.13.16_git20261016-r1 | 3.13.18_git20261030-r0 | tarfile.tar_filter could be bypassed using crafted link entries, inclu ... |
| CVE-2026-114583 | MEDIUM | python-3.13-base | 3.13.16_git20261016-r1 | 3.13.18_git20261030-r0 | tarfile.tar_filter could be bypassed using crafted link entries, inclu ... |
| CVE-2026-115557 | MEDIUM | python-3.13 | 3.13.16_git20261016-r1 | 3.13.18_git20261030-r0 | Python has added a denylist for known compromised certificates to the ... |
| CVE-2026-115557 | MEDIUM | python-3.13-base | 3.13.16_git20261016-r1 | 3.13.18_git20261030-r0 | Python has added a denylist for known compromised certificates to the ... |
| CVE-2026-12345 | MEDIUM | python-3.13 | 3.13.16_git20261016-r1 | 3.13.18_git20261030-r0 | python: python: Arbitrary file deletion via race condition during temporary directory cleanup |
| CVE-2026-12345 | MEDIUM | python-3.13-base | 3.13.16_git20261016-r1 | 3.13.18_git20261030-r0 | python: python: Arbitrary file deletion via race condition during temporary directory cleanup |
| CVE-2026-14663 | MEDIUM | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers |
| CVE-2026-14663 | MEDIUM | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers |
| CVE-2026-14663 | MEDIUM | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers |
| CVE-2026-14663 | MEDIUM | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers |
| CVE-2026-14663 | MEDIUM | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers |
| CVE-2026-14663 | MEDIUM | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers |
| CVE-2026-14663 | MEDIUM | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL pgcrypto: Information disclosure via cleartext storage with disabled ciphers |
| CVE-2026-14666 | MEDIUM | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access |
| CVE-2026-14666 | MEDIUM | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access |
| CVE-2026-14666 | MEDIUM | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access |
| CVE-2026-14666 | MEDIUM | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access |
| CVE-2026-14666 | MEDIUM | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access |
| CVE-2026-14666 | MEDIUM | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access |
| CVE-2026-14666 | MEDIUM | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Row security caching disregards role modifications leading to unauthorized data access |
| CVE-2026-14672 | MEDIUM | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: User existence oracle in SCRAM authentication |
| CVE-2026-14672 | MEDIUM | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: User existence oracle in SCRAM authentication |
| CVE-2026-14672 | MEDIUM | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: User existence oracle in SCRAM authentication |
| CVE-2026-14672 | MEDIUM | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: User existence oracle in SCRAM authentication |
| CVE-2026-14672 | MEDIUM | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: User existence oracle in SCRAM authentication |
| CVE-2026-14672 | MEDIUM | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: User existence oracle in SCRAM authentication |
| CVE-2026-14672 | MEDIUM | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: User existence oracle in SCRAM authentication |
| CVE-2026-14678 | MEDIUM | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm |
| CVE-2026-14678 | MEDIUM | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm |
| CVE-2026-14678 | MEDIUM | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm |
| CVE-2026-14678 | MEDIUM | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm |
| CVE-2026-14678 | MEDIUM | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm |
| CVE-2026-14678 | MEDIUM | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm |
| CVE-2026-14678 | MEDIUM | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in pg_trgm |
| CVE-2026-14681 | MEDIUM | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection |
| CVE-2026-14681 | MEDIUM | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection |
| CVE-2026-14681 | MEDIUM | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection |
| CVE-2026-14681 | MEDIUM | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection |
| CVE-2026-14681 | MEDIUM | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection |
| CVE-2026-14681 | MEDIUM | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection |
| CVE-2026-14681 | MEDIUM | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Improper enforcement of GSSAPI encryption via direct TLS connection |
| CVE-2026-18024 | MEDIUM | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function |
| CVE-2026-18024 | MEDIUM | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function |
| CVE-2026-18024 | MEDIUM | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function |
| CVE-2026-18024 | MEDIUM | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function |
| CVE-2026-18024 | MEDIUM | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function |
| CVE-2026-18024 | MEDIUM | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function |
| CVE-2026-18024 | MEDIUM | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Information disclosure via buffer over-read in ascii() function |
| CVE-2026-6470 | MEDIUM | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands |
| CVE-2026-6470 | MEDIUM | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands |
| CVE-2026-6470 | MEDIUM | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands |
| CVE-2026-6470 | MEDIUM | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands |
| CVE-2026-6470 | MEDIUM | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands |
| CVE-2026-6470 | MEDIUM | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands |
| CVE-2026-6470 | MEDIUM | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Denial of Service via missing authorization in DDL commands |
| CVE-2026-16241 | LOW | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL ECPG: Denial of Service via integer underflow |
| CVE-2026-16241 | LOW | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL ECPG: Denial of Service via integer underflow |
| CVE-2026-16241 | LOW | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL ECPG: Denial of Service via integer underflow |
| CVE-2026-16241 | LOW | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL ECPG: Denial of Service via integer underflow |
| CVE-2026-16241 | LOW | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL ECPG: Denial of Service via integer underflow |
| CVE-2026-16241 | LOW | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL ECPG: Denial of Service via integer underflow |
| CVE-2026-16241 | LOW | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL ECPG: Denial of Service via integer underflow |
| CVE-2026-6469 | LOW | ecpg-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification |
| CVE-2026-6469 | LOW | libpq-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification |
| CVE-2026-6469 | LOW | postgresql-17 | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification |
| CVE-2026-6469 | LOW | postgresql-17-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification |
| CVE-2026-6469 | LOW | postgresql-17-client | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification |
| CVE-2026-6469 | LOW | postgresql-17-client-base | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification |
| CVE-2026-6469 | LOW | postgresql-17-contrib | 17.10-r1 | 17.11-r0 | postgresql: PostgreSQL: Incorrect ownership assignment allows unauthorized statistics modification |
| GHSA-xmj3-9gf7-h52w | LOW | setuptools | 83.0.0 | 84.1.0 | setuptools: Windows path escape via namespace_packages.txt during legacy wheel installation Description |