Threats tagged 'ghsa-w429-xmhm-p6jc'

A SQL injection vulnerability exists in PostgreSQL extension-script substitutions that allows an attacker with database-level CREATE privilege to execute arbitrary code as the bootstrap superuser. This occurs via schema or owner names containing newlines or special substrings. The issue affects PostgreSQL versions before 18.7, 17.12, 16.16, 15.20, and 14.25.