Threats tagged 'ghsa-6ff8-cc3p-w6f6'

A use-after-free vulnerability exists in the PostgreSQL plperl procedural language, allowing an object creator to execute arbitrary code as the operating system user running the database. This occurs when the final reference to a Perl array or hash is dropped during PostgreSQL's object conversion process. Versions prior to PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.