Threats affecting pkg:rpm/redhat/libpq

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	8.8	EPSS 0.5%	CVE-2026-6477Red Hat Security Advisory: libpq security update High8.8EPSS 0.5%2026-07-28GCVE DatabaseCVE-2026-6477 The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: PostgreSQL libpq: Buffer overflow allows server superuser to overwrite client stack memory (CVE-2026-6477) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. EPSS 0.5%Report on CVE-2026-6477 Vulnerability Red Hat Product Security CWE-120 #ghsa-jm5f-gpfq-q9h3 #bit-postgresql-2026-6477	GCVE Database	2026-07-28
Medium	5.9	EPSS 0.4%	CVE-2025-12818Red Hat Security Advisory: libpq security update Medium5.9EPSS 0.4%2026-01-20GCVE DatabaseCVE-2025-12818 The libpq package provides the PostgreSQL client library, which allows client programs to connect to PostgreSQL servers. Security Fix(es): * postgresql: libpq undersizes allocations, via integer wraparound (CVE-2025-12818) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. EPSS 0.4%Report on CVE-2025-12818 Vulnerability Red Hat Product Security CWE-190	GCVE Database	2026-01-20

Page 1 of 1