https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 30 Oct 2026 11:23:31 +0000 https://db.gcve.eu/vuln/certfr-2026-avi-1413 certfr-2026-avi-1413 https://db.gcve.eu/vuln/certfr-2026-avi-1413 https://db.gcve.eu/vuln/ghsa-2wgx-cxvp-mvpw <p>PostgreSQL Anonymizer&#39;s `anon.image_blur()` function doesn&#39;t check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it (when ovecommit is on), which results in a cluster-wide crash recovery. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.</p> <p>PostgreSQL Anonymizer&#39;s `anon.image_blur()` function doesn&#39;t check the declared dimension of the provided image, allowing an attacker to provide a small image with enormous declared dimensions. This vulnerability can be exploited to exhaust the memory of a backend and OOM-kill it (when ovecommit is on), which results in a cluster-wide crash recovery. The problem is resolved in PostgreSQL Anonymizer 3.3.0 and later versions.</p> https://db.gcve.eu/vuln/ghsa-2wgx-cxvp-mvpw