Skip to content
OpenAdvisories

Package · Ubuntu

postgresql-17

20 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.7
    CVE-2026-6638

    PostgreSQL REFRESH PUBLICATION allows SQL injection via table name

    SQL injection in PostgreSQL logical replication ALTER SUBSCRIPTION ... REFRESH PUBLICATION allows a subscriber table creator to execute arbitrary SQL with the subscription's publication-side credentials. The attack takes effect at the next REFRESH PUBLICATION…

    postgresql-9.3 postgresql-9.5 postgresql-10 postgresql-12 Debian Ubuntu Alpine
  • Low 3.1
    CVE-2025-12817

    PostgreSQL CREATE STATISTICS does not check for schema CREATE privilege

    Missing authorization in PostgreSQL CREATE STATISTICS command allows a table owner to achieve denial of service against other CREATE STATISTICS users by creating in any schema. A later CREATE STATISTICS for the same name, from a user having the CREATE privile…

    postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine
  • Low 3.1
    CVE-2025-8713

    PostgreSQL optimizer statistics can expose sampled data within a view, partition, or child table

    PostgreSQL optimizer statistics allow a user to read sampled data within a view that the user cannot access. Separately, statistics allow a user to read sampled data that a row security policy intended to hide. PostgreSQL maintains statistics for tables by sa…

    postgresql-9.3 postgresql15 postgresql-9.5 postgresql-10 Debian Ubuntu Alpine