postgresql-contrib vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the postgresql-contrib package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
H CVE-2025-8714	<0:9.2.24-9.0.7.el7_9
H CVE-2025-1094	<0:9.2.24-9.0.5.el7_9
H Externally Controlled Reference to a Resource in Another Sphere	<0:9.2.24-9.0.3.el7_9
H Time-of-check Time-of-use (TOCTOU)	<0:9.2.24-9.0.1.el7_9
H Integer Overflow or Wraparound	<0:9.2.24-9.el7_9
H Incomplete Cleanup	<0:9.2.24-8.el7_9
H Integer Overflow or Wraparound	<0:9.2.24-7.el7_9
H SQL Injection	<0:9.2.24-6.el7_9
H Use of a Broken or Risky Cryptographic Algorithm	<0:9.2.24-6.el7_9
H SQL Injection	<0:9.2.24-6.el7_9
H SQL Injection	<0:9.2.24-1.el7_5
M Link Following	<0:9.2.23-3.el7_4
M Link Following	<0:9.2.23-3.el7_4
M CVE-2017-7547	<0:9.2.23-1.el7_4
M Improper Authentication	<0:9.2.23-1.el7_4
M Information Exposure	<0:9.2.21-1.el7
M Information Exposure	<0:9.2.21-1.el7
M Arbitrary Code Injection	<0:9.2.18-1.el7
M NULL Pointer Dereference	<0:9.2.18-1.el7
H Out-of-Bounds	<0:9.2.15-1.el7_2
M Out-of-Bounds	<0:9.2.14-1.el7_1
M Information Exposure	<0:9.2.14-1.el7_1
M Out-of-Bounds	<0:9.2.13-1.el7_1
M CVE-2015-3165	<0:9.2.13-1.el7_1
M Information Exposure	<0:9.2.13-1.el7_1
M Information Exposure	<0:9.2.10-2.el7_1
M Buffer Overflow	<0:9.2.10-2.el7_1
M SQL Injection	<0:9.2.10-2.el7_1
M Buffer Overflow	<0:9.2.10-2.el7_1