Threats tagged 'ghsa-63q5-h7pq-qqx5'

A use-after-free vulnerability exists in the PostgreSQL plperl procedural language feature that allows an object creator to execute arbitrary code as the operating system user running the database. This occurs by re-entering plperl and freeing a prepared query while an outer invocation is executing it. Versions prior to PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.