Threats tagged 'ghsa-qq3m-7qq2-628h'

A SQL injection vulnerability exists in PostgreSQL's reindexdb utility that allows an object creator to execute arbitrary SQL commands as the database user running reindexdb. This occurs via a crafted index name embedded in the parallel catalog query when using the --jobs option with --index. The vulnerability affects PostgreSQL major versions 17 and 18, specifically versions before 18.7 and 17.12. Versions prior to 17 are not affected.