Threats tagged 'ghsa-86xg-2gfq-h4cc'

A use-after-free vulnerability exists in the PostgreSQL plperl procedural language component. This flaw allows an object creator to execute arbitrary code with the privileges of the operating system user running the database. The vulnerability is triggered via reentrant return_next() calls. Versions prior to PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25 are affected.