Skip to content
OpenAdvisories
High DLA-4052-1 1 CVE

postgresql-13 - security update

Published Feb 13, 2025 · Updated Mar 9, 2026

Ecosystem: Debian

Fixed packages 1

ReleasePackageFixed in
Debian · 11 postgresql-13 13.19-0+deb11u1

Vulnerabilities 1

  • High 8.1
    CVE-2025-1094 Public exploit EPSS 90%

    PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation

    Improper neutralization of quoting syntax in PostgreSQL libpq functions PQescapeLiteral(), PQescapeIdentifier(), PQescapeString(), and PQescapeStringConn() allows a database input provider to achieve SQL injection in certain usage patterns. Specifically, SQL …

    postgresql-15 postgresql-9.3 postgresql-17 postgresql15 Debian Ubuntu Azure Linux Alpine Wolfi