← All credits

The PostgreSQL project thanks Anthropic OSS program for reporting this problem.

11 vulnerability records and advisories credit this contributor.

CVE-2026-116323

PostgreSQL pltcl reentrant result conversion use-after-free executes arbitrary code

CVE-2026-116320

PostgreSQL plperl array and hash conversion use-after-free executes arbitrary code

CVE-2026-116319

PostgreSQL plperl reentrant return_next() use-after-free executes arbitrary code

CVE-2026-116317

PostgreSQL ts_rank_cd() heap buffer overflow may execute arbitrary code

CVE-2026-116316

PostgreSQL security-restricted operations can create types in pg_temp, which later queries of the session find

CVE-2026-116315

PostgreSQL tsvector_delete() heap buffer overflow executes arbitrary code

CVE-2026-116313

PostgreSQL "vacuumdb --missing-stats-only" lets a database owner execute code as the vacuumdb user

CVE-2026-116322

PostgreSQL pre-authentication cancel request can leak a spinlock

CVE-2026-116321

PostgreSQL unterminated name value discloses server memory

CVE-2026-116308

PostgreSQL dict_int reads beyond zero-length tokens