Known Vulnerabilities for Postgresql by Red Hat Inc.
Listed below are 10 of the newest known vulnerabilities associated with "Postgresql" by "Red Hat Inc.".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-115453 json | Authorization Bypass Through User-Controlled Key (CWE-639) in the cart and wishlist repositories of MarcosCamara01 Ecommerce ... | Not Provided | 2026-10-22 | 2026-10-22 |
| CVE-2026-113666 json | ApostropheCMS is an open-source Node.js content management system. Prior to 1.1.0 of db-connect and 4.33.0 of ApostropheCMS, ... | Not Provided | 2026-10-20 | 2026-10-20 |
| CVE-2026-111440 json | 在 openGauss-connector-jdbc 的 pgjdbc/src/main/java/org/postgresql/log/LogFactory.java 中，LogFactory 根据 JDBC 连接�... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-110861 json | Better Auth @better-auth/drizzle-adapter and better-auth from 1.6.17 before 1.7.7, and @better-auth/kysely-adapter from 1.6.1... | Not Provided | 2026-10-14 | 2026-10-20 |
| CVE-2026-109954 json | Parse Server 5.4.0 before 8.6.96 and 9.0.0 before 9.10.2-alpha.5 shares transactional batch state across concurrent requests,... | Not Provided | 2026-10-13 | 2026-10-13 |
| CVE-2026-108604 json | Tabularis through 0.27.0 contains an incorrect authorization vulnerability in the MCP run_query safety gate that allows promp... | Not Provided | 2026-10-10 | 2026-10-13 |
| CVE-2026-107315 json | pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 through 42.7.13 pads a value that is shorter than its declared length wit... | Not Provided | 2026-10-08 | 2026-10-08 |
| CVE-2026-107314 json | pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.11 through 42.7.13 enforce no restriction when the requireAuth connection p... | Not Provided | 2026-10-07 | 2026-10-08 |
| CVE-2026-107313 json | pgjdbc, the PostgreSQL JDBC Driver, versions 42.7.4 and 42.7.5 can send the previous contents of the GSS send buffer in place... | Not Provided | 2026-10-07 | 2026-10-07 |
| CVE-2026-104947 json | WarehousePG (WHPG) 7.2.1 through 7.6.0 is affected by a missing authorization vulnerability (CWE-862) in the built-in functio... | Not Provided | 2026-10-21 | 2026-10-21 |