Skip to content
OpenAdvisories

Package · Debian

pg-partman

8 known vulnerabilities.

1 result · Clear filters · Feed

  • Critical 9.9

    pg_partman has privilege escalation through SQL injection in create_partition_time()

    pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, create_partition_time() reads the writable part_config.time_encoder text value and interpolates it without identifier quoting into a dynamically executed SELEC…