Threats tagged 'ghsa-xqm8-qxc4-qxc9'

A vulnerability in PostgreSQL's MERGE command causes inconsistent transition-capture state, allowing an AFTER trigger to process an incorrect new row when using partitioned table MERGE operations that perform an INSERT before an UPDATE. This affects PostgreSQL major versions 15 through 18, specifically versions before 15.20, 16.16, 17.12, and 18.7. Versions prior to 15 are not affected.