Known Vulnerabilities for PsqlODBC by PostgreSQL
Listed below are 10 of the newest known vulnerabilities associated with "PsqlODBC" by "PostgreSQL".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-120067 json | For updatable cursors, which are enabled by default, psqlODBC adds hidden ctid and, for tables with OIDs, oid columns to the ... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120066 json | On Unix-like systems, when logging is enabled, psqlODBC creates its log files in /tmp by default, named from the program name... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120065 json | For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC uses that column to identi... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120064 json | Several psqlODBC entry points use an application-supplied column number or row index as an array index without validating it.... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120063 json | When psqlODBC quotes a schema or table name into a 128-byte stack buffer, its length check lets it write up to two bytes past... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120062 json | SQLSpecialColumns in psqlODBC splices the table and schema names it receives into its catalog query without escaping them, wh... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120061 json | The psqlODBC parser for ODBC escape sequences in application SQL text writes the argument offsets of a {fn} escape into a fix... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120060 json | psqlODBC trusts counts and lengths in server data in three places. SQLBulkOperations uses a server-supplied row count in a si... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120059 json | For an updatable cursor over a table without OIDs that has an auto-increment int4 column, psqlODBC places that column's name,... | Not Provided | 2026-11-02 | 2026-11-02 |
| CVE-2026-120058 json | psqlODBC sizes its row cache from the column count of a cursor's first result, but recomputes the column count from each late... | Not Provided | 2026-11-02 | 2026-11-02 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Postgresql | Psqlodbc | 8.3.400 |