Threats tagged 'ghsa-mhqh-c375-96c6'

A vulnerability in PostgreSQL's pg_restore utility allows arbitrary code execution due to improper input validation of non-plain archive providers. This flaw affects versions prior to PostgreSQL 18.7, 17.12, 16.16, 15.20, and 14.25. The issue enables an attacker to execute code as the operating system user running pg_restore by supplying a crafted archive. This is distinct from arbitrary SQL execution during restore, as it impacts the OS process itself.