CVE and update status of the FreeBSD ports tree3,295 unaddressed CVEs in 670 portsAll times are CET
CVE details

CVE-2026-15741

SQL injection in PostgreSQL EXTRACT() deparse allows an object owner to execute arbitrary SQL as a superuser via a hostile object definition. Attacks affect expression deparse consumers broadly, including pg_dump, psql commands like \sf, and any similar usage in non-core tools. Versions before PostgreSQL 18.6, 17.11, 16.15, 15.19, and 14.24 are affected.

Score
8.8 high
Published
2026-08-13
Links
NVD · cve.org

Matched ports (28)

PortPackageVersionStatusMaintainer
databases/postgresql14-clientpostgresql14-client14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-contribpostgresql14-contrib14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-docspostgresql14-docs14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-plperlpostgresql14-plperl14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-plpythonpostgresql14-plpython14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-pltclpostgresql14-pltcl14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql14-serverpostgresql14-server14.24fixed by updatepgsql@FreeBSD.org
databases/postgresql15-clientpostgresql15-client15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-contribpostgresql15-contrib15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-docspostgresql15-docs15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-plperlpostgresql15-plperl15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-plpythonpostgresql15-plpython15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-pltclpostgresql15-pltcl15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql15-serverpostgresql15-server15.19fixed by updatepgsql@FreeBSD.org
databases/postgresql16-clientpostgresql16-client16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-contribpostgresql16-contrib16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-docspostgresql16-docs16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-plperlpostgresql16-plperl16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-plpythonpostgresql16-plpython16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-pltclpostgresql16-pltcl16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql16-serverpostgresql16-server16.15fixed by updatepgsql@FreeBSD.org
databases/postgresql17-clientpostgresql17-client17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-contribpostgresql17-contrib17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-docspostgresql17-docs17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-plperlpostgresql17-plperl17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-plpythonpostgresql17-plpython17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-pltclpostgresql17-pltcl17.11fixed by updatepgsql@FreeBSD.org
databases/postgresql17-serverpostgresql17-server17.11fixed by updatepgsql@FreeBSD.org

VuXML