Threats tagged 'ghsa-4hpm-888q-3f7r'

Uncaught exceptions in the PostgreSQL plperl procedural language handler can lead to use of a stale sigjmp_buf when an object creator uses a tied Perl object or a Perl object whose overloaded conversion throws during error handling. This flaw affects PostgreSQL versions prior to 18.7, 17.12, 16.16, 15.20, and 14.25. The vulnerability has a high severity with a CVSS score of 8.8 and may allow arbitrary code execution on some platforms.