Threats tagged 'ghsa-wrm7-crvq-vpv9'

CVE-2026-16237 is a vulnerability in PostgreSQL versions prior to 18.7, 17.12, 16.16, 15.20, and 14.25. It involves improper protection in the INSERT ... ON CONFLICT command on auto-updatable views. An attacker with INSERT and UPDATE privileges on the view can read and modify every row in the base table, bypassing the view's WHERE condition, including security_barrier views.