Threats tagged 'ghsa-63j6-rm8q-mhqx'

A use-after-free vulnerability exists in the PostgreSQL dblink extension that allows an object creator to execute arbitrary code with the privileges of the operating system user running the database. This occurs due to type conversion code that re-enters dblink and closes a connection while an outer dblink call is still reading its results. Versions before PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.