Product by Debian
Postgresql-13
29 known vulnerabilities in Postgresql-13 (Debian), 0 of them actively exploited (CISA KEV).
Key figures
29
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
0
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2025-1094 | PostgreSQL quoting APIs miss neutralizing quoting syntax in text that fails encoding validation | 8.1 | |
| High | CVE-2022-1552 | Postgresql: Incomplete Cleanup | 8.8 | |
| High | CVE-2023-5869 | Postgresql: buffer overrun from integer overflow in array modification | 8.8 | |
| High | CVE-2024-0985 | PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL | 8.0 | |
| High | CVE-2024-7348 | PostgreSQL relation replacement during pg_dump executes arbitrary SQL | 8.8 | |
| High | CVE-2026-2005 | PostgreSQL pgcrypto heap buffer overflow executes arbitrary code | 8.8 | |
| High | CVE-2026-2004 | PostgreSQL: Improper Validation of Specified Type of Input | 8.8 | |
| High | CVE-2026-2006 | PostgreSQL missing validation of multibyte character length executes arbitrary code | 8.8 | |
| High | CVE-2026-6473 | PostgreSQL server undersizes allocations, via integer wraparound | 8.8 | |
| High | CVE-2021-23214 | Postgresql: SQL Injection | 8.1 | |
| High | CVE-2023-39417 | Postgresql: extension script @substitutions@ within quoting allow sql injection | 7.5 | |
| Medium | CVE-2023-5868 | Postgresql: memory disclosure in aggregate function calls | 4.3 | |
| High | CVE-2025-8714 | PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client | 8.8 | |
| Medium | CVE-2025-4207 | PostgreSQL: Buffer Over-read | 5.9 | |
| High | CVE-2023-2454 | Postgresql: Improper Input Validation | 7.2 | |
| Medium | CVE-2021-23222 | Postgresql: Insufficiently Protected Credentials | 5.9 | |
| High | CVE-2026-6477 | PostgreSQL libpq lo_* functions let server superuser overwrite client stack memory | 8.8 | |
| High | CVE-2026-6479 | PostgreSQL SSL/GSS init causes denial of service, via uncontrolled recursion | 7.5 | |
| Medium | CVE-2023-5870 | Red Hat Advanced Cluster Security 4.2: Uncontrolled Resource Consumption | 2.2 | |
| High | CVE-2026-6475 | PostgreSQL pg_basebackup and pg_rewind can overwrite unrelated files of origin superuser choice | 8.8 | |
| High | CVE-2026-6637 | PostgreSQL refint allows stack buffer overflow and SQL injection | 8.8 | |
| Medium | CVE-2026-6478 | PostgreSQL discloses MD5-hashed passwords via covert timing channel | 6.5 | |
| High | CVE-2025-8715 | PostgreSQL: CRLF Injection | 8.8 | |
| Medium | CVE-2023-2455 | Postgresql: Improper Input Validation | 5.4 | |
| Medium | CVE-2025-12818 | PostgreSQL libpq undersizes allocations, via integer wraparound | 5.9 |