Skip to content
OpenAdvisories

Vendor

timescale

10 known vulnerabilities.

Products

timescaledb 5 pgai 1 tiger-slack 1 tiger-gh-mcp-server 1 pg-aiguide 1 pgvectorscale 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.1
    CVE-2025-52467 Public exploit

    pgai secrets exfiltration via `pull_request_target`

    pgai is a Python library that transforms PostgreSQL into a retrieval engine for RAG and Agentic applications. Prior to commit 8eb3567, the pgai repository was vulnerable to an attack allowing the exfiltration of all secrets used in one workflow. In particular…

    timescale pgai