Skip to content
OpenAdvisories

Vendor

pgpartman

7 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Critical 9.9

    pg_partman has privilege escalation through SQL injection in create_partition_time()

    pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, create_partition_time() reads the writable part_config.time_encoder text value and interpolates it without identifier quoting into a dynamically executed SELEC…