https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-14T21:15:28.416013+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2026-116330 CVE-2026-116330 — PostgreSQL pg_dump tar restore.sql fails to block psql command injection 2026-11-14T21:15:28.417052+00:00

Affected: PostgreSQL

Untrusted data inclusion in PostgreSQL pg_dump tar-format restore.sql allows a compromised origin server to execute arbitrary code as the client operating system account running psql, via the predictable restriction key in restore.sql. This is a gap in the fix for CVE-2025-8714. restore.sql is undocumented. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.