Homepage

postgresql-contrib

Report a new vulnerability Found a mistake?

Direct Vulnerabilities

Known vulnerabilities in the postgresql-contrib package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free
VulnerabilityVulnerable Version
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • M
Missing Authorization

*
  • L
Incorrect Ownership Assignment

*
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:12.22-12.module+el8.10.0+24952+3d791381
  • M
Buffer Over-read

*
  • H
Buffer Access with Incorrect Length Value

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • M
Cleartext Storage of Sensitive Information

*
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • H
Stack-based Buffer Overflow

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • H
SQL Injection

*
  • L
Untrusted Search Path

*
  • M
Information Exposure

*
  • L
Integer Underflow

*
  • M
Information Exposure Through Caching

*
  • M
Buffer Over-read

*
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • H
Arbitrary Code Injection

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • H
Integer Overflow or Wraparound

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • H
Heap-based Buffer Overflow

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • H
Out-of-bounds Write

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • H
Heap-based Buffer Overflow

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • H
Integer Overflow or Wraparound

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • H
Access of Resource Using Incompatible Type ('Type Confusion')

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • H
Heap-based Buffer Overflow

<0:16.15-1.module+el8.10.0+24863+d1dc0d60
  • M
SQL Injection

<0:16.14-1.module+el8.10.0+24339+d919fb58
  • H
Unchecked Input for Loop Condition

<0:16.14-1.module+el8.10.0+24339+d919fb58
  • H
Buffer Overflow

<0:13.23-3.module+el8.10.0+24363+8e5fd2e3
  • M
Missing Authorization

<0:16.14-1.module+el8.10.0+24339+d919fb58
  • H
Buffer Overflow

<0:13.23-3.module+el8.10.0+24363+8e5fd2e3
  • M
Link Following

<0:13.23-3.module+el8.10.0+24363+8e5fd2e3
  • H
Integer Overflow or Wraparound

<0:13.23-3.module+el8.10.0+24363+8e5fd2e3
  • H
Covert Timing Channel

<0:13.23-3.module+el8.10.0+24363+8e5fd2e3
  • H
Use of Externally-Controlled Format String

<0:16.14-1.module+el8.10.0+24339+d919fb58
  • H
Improper Validation of Specified Index, Position, or Offset in Input

<0:15.17-1.module+el8.10.0+24043+d28c3b3f
  • H
Buffer Overflow

<0:15.17-1.module+el8.10.0+24043+d28c3b3f
  • H
Improper Validation of Specified Type of Input

<0:15.17-1.module+el8.10.0+24043+d28c3b3f
  • H
Improper Validation of Specified Type of Input

<0:15.17-1.module+el8.10.0+24043+d28c3b3f
  • M
Integer Overflow or Wraparound

<0:16.11-1.module+el8.10.0+23783+d9790420
  • M
Missing Authorization

<0:16.11-1.module+el8.10.0+23783+d9790420
  • L
Exposure of Sensitive Information Through Metadata

*
  • H
CRLF Injection

<0:12.22-5.module+el8.10.0+23469+cd66ea30
  • H
Inclusion of Functionality from Untrusted Control Sphere

<0:12.22-12.module+el8.10.0+24952+3d791381
  • H
Buffer Over-read

<0:15.14-1.module+el8.10.0+23423+5a199198
  • H
External Control of System or Configuration Setting

<0:15.10-1.module+el8.10.0+22550+22c7d5ca
  • H
Incorrect Privilege Assignment

<0:15.10-1.module+el8.10.0+22550+22c7d5ca
  • H
Improper Preservation of Consistency Between Independent Representations of Shared State

<0:15.10-1.module+el8.10.0+22550+22c7d5ca
  • L
Use of Less Trusted Source

*
  • H
Improper Neutralization

<0:16.8-1.module+el8.10.0+22867+e4e13b1c
  • H
Time-of-check Time-of-use (TOCTOU)

<0:12.20-1.module+el8.10.0+22214+9beb89d6
  • L
Missing Authorization

<0:16.4-1.module+el8.10.0+22209+060d7a0a
  • H
Privilege Dropping / Lowering Errors

<0:13.14-1.module+el8.9.0+21288+3d364c44
  • L
Resource Exhaustion

<0:12.17-1.module+el8.9.0+20789+410e66ce
  • M
Function Call With Incorrect Argument Type

<0:12.17-1.module+el8.9.0+20789+410e66ce
  • H
Integer Overflow or Wraparound

<0:10.23-3.module+el8.9.0+20831+78489779
  • L
Buffer Overflow

*
  • L
Insufficient Granularity of Access Control

<0:15.5-1.module+el8.9.0+20663+03952ce4
  • M
SQL Injection

<0:12.17-1.module+el8.9.0+20789+410e66ce
  • M
Improper Input Validation

<0:10.23-2.module+el8.8.0+19493+5804baf6
  • M
Improper Input Validation

<0:10.23-2.module+el8.8.0+19493+5804baf6
  • M
Information Exposure

<0:13.10-1.module+el8.7.0+18279+1ca8cf12
  • M
Privilege Defined With Unsafe Actions

<0:10.23-1.module+el8.7.0+17280+3a452e1f
  • H
Incorrect Privilege Assignment

<0:12.11-2.module+el8.6.0+15345+1dd8d6b8
  • M
SQL Injection

<0:12.9-1.module+el8.5.0+13373+4554acc4
  • M
Information Exposure

<0:12.9-1.module+el8.5.0+13373+4554acc4
  • L
Information Exposure

<0:12.7-1.module+el8.4.0+11288+c193d6d7
  • M
Improper Input Validation

<0:10.14-1.module+el8.2.0+7801+be0fed80
  • H
Improper Authorization

<0:9.6.20-1.module+el8.3.0+8938+7f0e88b6
  • H
Improper Access Control

<0:9.6.20-1.module+el8.3.0+8938+7f0e88b6
  • H
Integer Overflow or Wraparound

<0:9.6.22-1.module+el8.4.0+11244+beebcf7e
  • H
Use of a Broken or Risky Cryptographic Algorithm

<0:10.15-1.module+el8.3.0+8944+1ca16b1f
  • H
SQL Injection

<0:10.15-1.module+el8.3.0+8944+1ca16b1f
  • H
Information Exposure

<0:9.6.22-1.module+el8.4.0+11244+beebcf7e
  • M
Out-of-bounds Read

<0:12.7-1.module+el8.4.0+11288+c193d6d7
  • H
Arbitrary Code Injection

<0:10.15-1.module+el8.3.0+8944+1ca16b1f
  • H
Improper Input Validation

<0:9.6.20-1.module+el8.3.0+8938+7f0e88b6
  • H
SQL Injection

<0:9.6.20-1.module+el8.3.0+8938+7f0e88b6
  • M
Stack-based Buffer Overflow

<0:10.14-1.module+el8.2.0+7801+be0fed80