Skip to content
OpenAdvisories

Package · Go

github.com/cloudnative-pg/cloudnative-pg

1 known vulnerabilities.

1 result · Feed

  • Critical 9.4

    CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE

    CloudNativePG is a platform designed to manage PostgreSQL databases within Kubernetes environments. Prior to 1.29.1 and 1.28.3, the CloudNativePG metrics exporter opens its PostgreSQL connection as the postgres superuser via the pod-local Unix socket, then de…