{"schema_version":"2","view":"grouped","data":[{"id":75829,"cve_ids":["CVE-2026-103484"],"payload":{"kind":"advisory","title":"DEBIAN-CVE-2026-103484","summary":"IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.","evidence":"osv:DEBIAN-CVE-2026-103484","products":[{"name":{"value":"pgvector","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/0/versions"},{"value":"0.8.1-1","evidence":"/affected/0/versions"},{"value":"0.8.1-2","evidence":"/affected/0/versions"},{"value":"0.8.2-1","evidence":"/affected/0/versions"},{"value":"0.8.3-1","evidence":"/affected/0/versions"},{"value":"0.8.4-1","evidence":"/affected/0/versions"},{"value":"0.8.5-1","evidence":"/affected/0/versions"},{"value":"0.8.6-1","evidence":"/affected/0/versions"},{"value":"0.8.7-1","evidence":"/affected/0/versions"}]},{"name":{"value":"pgvector","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-1","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/1/versions"},{"value":"0.8.1-1","evidence":"/affected/1/versions"},{"value":"0.8.1-2","evidence":"/affected/1/versions"},{"value":"0.8.2-1","evidence":"/affected/1/versions"},{"value":"0.8.3-1","evidence":"/affected/1/versions"},{"value":"0.8.4-1","evidence":"/affected/1/versions"},{"value":"0.8.5-1","evidence":"/affected/1/versions"},{"value":"0.8.6-1","evidence":"/affected/1/versions"}]}],"severity":"high","structured":{"id":"DEBIAN-CVE-2026-103484","aliases":["DEBIAN-CVE-2026-103484"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=trixie","ecosystem":"Debian:13"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1","0.8.6-1","0.8.7-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-103484.json"},"ecosystem_specific":{"urgency":"not yet assigned"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-1"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=forky","ecosystem":"Debian:14"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1","0.8.6-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-103484.json"},"ecosystem_specific":{"urgency":"not yet assigned"}}],"modified":"2026-10-04T23:00:07.094304320Z","provider":"osv","upstream":["CVE-2026-103484"],"references":["https://security-tracker.debian.org/tracker/CVE-2026-103484"]},"related_cves":[{"value":"CVE-2026-103484","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:793bba27-6e8c-45cb-8135-0704f77360d7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-103484","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}],"products":[{"name":{"value":"pgvector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103484","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-103484","advisory_id":"793bba27-6e8c-45cb-8135-0704f77360d7","event_types":["advisory"],"published_at":"2026-10-26T21:17:47.670953+00:00","technologies":["core-osv","pgvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T20:17:23.213+00:00","detail_url":"/advisories/advisory%3A793bba27-6e8c-45cb-8135-0704f77360d7","group":{"id":"advisory:793bba27-6e8c-45cb-8135-0704f77360d7","revision":1,"primary_event_id":83320,"change":"published","superseded_by":[],"changed":{"id":83320,"cve_ids":["CVE-2026-103484"],"payload":{"kind":"advisory","title":"DEBIAN-CVE-2026-103484","summary":"IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.","evidence":"osv:DEBIAN-CVE-2026-103484","products":[{"name":{"value":"pgvector","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/0/versions"},{"value":"0.8.1-1","evidence":"/affected/0/versions"},{"value":"0.8.1-2","evidence":"/affected/0/versions"},{"value":"0.8.2-1","evidence":"/affected/0/versions"},{"value":"0.8.3-1","evidence":"/affected/0/versions"},{"value":"0.8.4-1","evidence":"/affected/0/versions"},{"value":"0.8.5-1","evidence":"/affected/0/versions"},{"value":"0.8.6-1","evidence":"/affected/0/versions"},{"value":"0.8.7-1","evidence":"/affected/0/versions"}]},{"name":{"value":"pgvector","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-1","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/1/versions"},{"value":"0.8.1-1","evidence":"/affected/1/versions"},{"value":"0.8.1-2","evidence":"/affected/1/versions"},{"value":"0.8.2-1","evidence":"/affected/1/versions"},{"value":"0.8.3-1","evidence":"/affected/1/versions"},{"value":"0.8.4-1","evidence":"/affected/1/versions"},{"value":"0.8.5-1","evidence":"/affected/1/versions"},{"value":"0.8.6-1","evidence":"/affected/1/versions"}]}],"severity":"high","structured":{"id":"DEBIAN-CVE-2026-103484","aliases":["DEBIAN-CVE-2026-103484"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=trixie","ecosystem":"Debian:13"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1","0.8.6-1","0.8.7-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-103484.json"},"ecosystem_specific":{"urgency":"not yet assigned"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-1"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=forky","ecosystem":"Debian:14"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1","0.8.6-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-103484.json"},"ecosystem_specific":{"urgency":"not yet assigned"}}],"modified":"2026-10-04T23:00:07.094304320Z","provider":"osv","upstream":["CVE-2026-103484"],"references":["https://security-tracker.debian.org/tracker/CVE-2026-103484"]},"related_cves":[{"value":"CVE-2026-103484","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:793bba27-6e8c-45cb-8135-0704f77360d7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-103484","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}],"products":[{"name":{"value":"pgvector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103484","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-103484","advisory_id":"793bba27-6e8c-45cb-8135-0704f77360d7","event_types":["advisory"],"published_at":"2026-10-26T21:17:47.670953+00:00","technologies":["core-osv","pgvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T20:17:23.213+00:00","detail_url":"/events/83320"},"members":[{"id":83320,"cve_ids":["CVE-2026-103484"],"payload":{"kind":"advisory","title":"DEBIAN-CVE-2026-103484","summary":"IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.","evidence":"osv:DEBIAN-CVE-2026-103484","products":[{"name":{"value":"pgvector","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/0/versions"},{"value":"0.8.1-1","evidence":"/affected/0/versions"},{"value":"0.8.1-2","evidence":"/affected/0/versions"},{"value":"0.8.2-1","evidence":"/affected/0/versions"},{"value":"0.8.3-1","evidence":"/affected/0/versions"},{"value":"0.8.4-1","evidence":"/affected/0/versions"},{"value":"0.8.5-1","evidence":"/affected/0/versions"},{"value":"0.8.6-1","evidence":"/affected/0/versions"},{"value":"0.8.7-1","evidence":"/affected/0/versions"}]},{"name":{"value":"pgvector","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.7-1","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/1/versions"},{"value":"0.8.1-1","evidence":"/affected/1/versions"},{"value":"0.8.1-2","evidence":"/affected/1/versions"},{"value":"0.8.2-1","evidence":"/affected/1/versions"},{"value":"0.8.3-1","evidence":"/affected/1/versions"},{"value":"0.8.4-1","evidence":"/affected/1/versions"},{"value":"0.8.5-1","evidence":"/affected/1/versions"},{"value":"0.8.6-1","evidence":"/affected/1/versions"}]}],"severity":"high","structured":{"id":"DEBIAN-CVE-2026-103484","aliases":["DEBIAN-CVE-2026-103484"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=trixie","ecosystem":"Debian:13"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1","0.8.6-1","0.8.7-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-103484.json"},"ecosystem_specific":{"urgency":"not yet assigned"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.7-1"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=forky","ecosystem":"Debian:14"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1","0.8.6-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-103484.json"},"ecosystem_specific":{"urgency":"not yet assigned"}}],"modified":"2026-10-04T23:00:07.094304320Z","provider":"osv","upstream":["CVE-2026-103484"],"references":["https://security-tracker.debian.org/tracker/CVE-2026-103484"]},"related_cves":[{"value":"CVE-2026-103484","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:793bba27-6e8c-45cb-8135-0704f77360d7","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-103484","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}],"products":[{"name":{"value":"pgvector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-103484","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-103484","advisory_id":"793bba27-6e8c-45cb-8135-0704f77360d7","event_types":["advisory"],"published_at":"2026-10-26T21:17:47.670953+00:00","technologies":["core-osv","pgvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-10-01T20:17:23.213+00:00","detail_url":"/events/83320"}]}},{"id":70979,"cve_ids":["CVE-2026-18022"],"payload":{"kind":"advisory","title":"DEBIAN-CVE-2026-18022","summary":"Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.","evidence":"osv:DEBIAN-CVE-2026-18022","products":[{"name":{"value":"pgvector","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/0/versions"},{"value":"0.8.1-1","evidence":"/affected/0/versions"},{"value":"0.8.1-2","evidence":"/affected/0/versions"},{"value":"0.8.2-1","evidence":"/affected/0/versions"},{"value":"0.8.3-1","evidence":"/affected/0/versions"},{"value":"0.8.4-1","evidence":"/affected/0/versions"},{"value":"0.8.5-1","evidence":"/affected/0/versions"},{"value":"0.8.6-1","evidence":"/affected/0/versions"},{"value":"0.8.7-1","evidence":"/affected/0/versions"}]},{"name":{"value":"pgvector","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.6-1","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/1/versions"},{"value":"0.8.1-1","evidence":"/affected/1/versions"},{"value":"0.8.1-2","evidence":"/affected/1/versions"},{"value":"0.8.2-1","evidence":"/affected/1/versions"},{"value":"0.8.3-1","evidence":"/affected/1/versions"},{"value":"0.8.4-1","evidence":"/affected/1/versions"},{"value":"0.8.5-1","evidence":"/affected/1/versions"}]}],"severity":"high","structured":{"id":"DEBIAN-CVE-2026-18022","aliases":["DEBIAN-CVE-2026-18022"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=trixie","ecosystem":"Debian:13"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1","0.8.6-1","0.8.7-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-18022.json"},"ecosystem_specific":{"urgency":"unimportant"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.6-1"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=forky","ecosystem":"Debian:14"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-18022.json"},"ecosystem_specific":{"urgency":"unimportant"}}],"modified":"2026-10-02T21:00:06.769272592Z","provider":"osv","upstream":["CVE-2026-18022"],"references":["https://security-tracker.debian.org/tracker/CVE-2026-18022"]},"related_cves":[{"value":"CVE-2026-18022","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:583d3572-2f0c-4474-82cb-d911d9b765e1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-18022","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}],"products":[{"name":{"value":"pgvector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-18022","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-18022","advisory_id":"583d3572-2f0c-4474-82cb-d911d9b765e1","event_types":["advisory"],"published_at":"2026-10-25T22:46:03.576994+00:00","technologies":["core-osv","pgvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-29T20:17:02.593+00:00","detail_url":"/advisories/advisory%3A583d3572-2f0c-4474-82cb-d911d9b765e1","group":{"id":"advisory:583d3572-2f0c-4474-82cb-d911d9b765e1","revision":1,"primary_event_id":71352,"change":"published","superseded_by":[],"changed":{"id":71352,"cve_ids":["CVE-2026-18022"],"payload":{"kind":"advisory","title":"DEBIAN-CVE-2026-18022","summary":"Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.","evidence":"osv:DEBIAN-CVE-2026-18022","products":[{"name":{"value":"pgvector","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/0/versions"},{"value":"0.8.1-1","evidence":"/affected/0/versions"},{"value":"0.8.1-2","evidence":"/affected/0/versions"},{"value":"0.8.2-1","evidence":"/affected/0/versions"},{"value":"0.8.3-1","evidence":"/affected/0/versions"},{"value":"0.8.4-1","evidence":"/affected/0/versions"},{"value":"0.8.5-1","evidence":"/affected/0/versions"},{"value":"0.8.6-1","evidence":"/affected/0/versions"},{"value":"0.8.7-1","evidence":"/affected/0/versions"}]},{"name":{"value":"pgvector","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.6-1","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/1/versions"},{"value":"0.8.1-1","evidence":"/affected/1/versions"},{"value":"0.8.1-2","evidence":"/affected/1/versions"},{"value":"0.8.2-1","evidence":"/affected/1/versions"},{"value":"0.8.3-1","evidence":"/affected/1/versions"},{"value":"0.8.4-1","evidence":"/affected/1/versions"},{"value":"0.8.5-1","evidence":"/affected/1/versions"}]}],"severity":"high","structured":{"id":"DEBIAN-CVE-2026-18022","aliases":["DEBIAN-CVE-2026-18022"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=trixie","ecosystem":"Debian:13"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1","0.8.6-1","0.8.7-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-18022.json"},"ecosystem_specific":{"urgency":"unimportant"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.6-1"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=forky","ecosystem":"Debian:14"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-18022.json"},"ecosystem_specific":{"urgency":"unimportant"}}],"modified":"2026-10-02T21:00:06.769272592Z","provider":"osv","upstream":["CVE-2026-18022"],"references":["https://security-tracker.debian.org/tracker/CVE-2026-18022"]},"related_cves":[{"value":"CVE-2026-18022","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:583d3572-2f0c-4474-82cb-d911d9b765e1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-18022","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}],"products":[{"name":{"value":"pgvector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-18022","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-18022","advisory_id":"583d3572-2f0c-4474-82cb-d911d9b765e1","event_types":["advisory"],"published_at":"2026-10-25T22:46:03.576994+00:00","technologies":["core-osv","pgvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-29T20:17:02.593+00:00","detail_url":"/events/71352"},"members":[{"id":71352,"cve_ids":["CVE-2026-18022"],"payload":{"kind":"advisory","title":"DEBIAN-CVE-2026-18022","summary":"Integer wraparound in IVFFlat index build in pgvector before 0.8.6 allows a database user to write data out-of-bounds, which could lead to arbitrary code execution. Only 32-bit systems are affected.","evidence":"osv:DEBIAN-CVE-2026-18022","products":[{"name":{"value":"pgvector","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/0/versions"},{"value":"0.8.1-1","evidence":"/affected/0/versions"},{"value":"0.8.1-2","evidence":"/affected/0/versions"},{"value":"0.8.2-1","evidence":"/affected/0/versions"},{"value":"0.8.3-1","evidence":"/affected/0/versions"},{"value":"0.8.4-1","evidence":"/affected/0/versions"},{"value":"0.8.5-1","evidence":"/affected/0/versions"},{"value":"0.8.6-1","evidence":"/affected/0/versions"},{"value":"0.8.7-1","evidence":"/affected/0/versions"}]},{"name":{"value":"pgvector","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.6-1","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/1/versions"},{"value":"0.8.1-1","evidence":"/affected/1/versions"},{"value":"0.8.1-2","evidence":"/affected/1/versions"},{"value":"0.8.2-1","evidence":"/affected/1/versions"},{"value":"0.8.3-1","evidence":"/affected/1/versions"},{"value":"0.8.4-1","evidence":"/affected/1/versions"},{"value":"0.8.5-1","evidence":"/affected/1/versions"}]}],"severity":"high","structured":{"id":"DEBIAN-CVE-2026-18022","aliases":["DEBIAN-CVE-2026-18022"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=trixie","ecosystem":"Debian:13"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1","0.8.6-1","0.8.7-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-18022.json"},"ecosystem_specific":{"urgency":"unimportant"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.6-1"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=forky","ecosystem":"Debian:14"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-18022.json"},"ecosystem_specific":{"urgency":"unimportant"}}],"modified":"2026-10-02T21:00:06.769272592Z","provider":"osv","upstream":["CVE-2026-18022"],"references":["https://security-tracker.debian.org/tracker/CVE-2026-18022"]},"related_cves":[{"value":"CVE-2026-18022","evidence":"/upstream"}],"security_relevant":true,"severity_evidence":"/severity/0/score"},"group_id":"advisory:583d3572-2f0c-4474-82cb-d911d9b765e1","priority":{"reasons":["publisher_severity","linked_severity"],"severity":"high","linked_cves":[{"cve":"CVE-2026-18022","metrics":[{"format":"CVSS","cvssV3_1":{"version":"3.1","baseScore":8.8,"baseSeverity":"HIGH","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}],"products":[{"name":{"value":"pgvector","evidence":"/containers/cna/affected/0/product"},"prerequisites":[],"fixed_versions":[],"affected_versions":[]}],"severity":"high","source_id":"core-cve","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-18022","relationship":"advisory","known_exploited":false,"relationship_evidence":"/upstream"}],"fix_available":true,"known_exploited":false,"publisher_severity":"high"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-18022","advisory_id":"583d3572-2f0c-4474-82cb-d911d9b765e1","event_types":["advisory"],"published_at":"2026-10-25T22:46:03.576994+00:00","technologies":["core-osv","pgvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-07-29T20:17:02.593+00:00","detail_url":"/events/71352"}]}},{"id":56405,"cve_ids":[],"payload":{"kind":"advisory","title":"DEBIAN-CVE-2026-3172","summary":"Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.","evidence":"osv:DEBIAN-CVE-2026-3172","products":[{"name":{"value":"pgvector","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/0/versions"},{"value":"0.8.1-1","evidence":"/affected/0/versions"},{"value":"0.8.1-2","evidence":"/affected/0/versions"},{"value":"0.8.2-1","evidence":"/affected/0/versions"},{"value":"0.8.3-1","evidence":"/affected/0/versions"},{"value":"0.8.4-1","evidence":"/affected/0/versions"},{"value":"0.8.5-1","evidence":"/affected/0/versions"},{"value":"0.8.6-1","evidence":"/affected/0/versions"}]},{"name":{"value":"pgvector","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.2-1","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/1/versions"},{"value":"0.8.1-1","evidence":"/affected/1/versions"},{"value":"0.8.1-2","evidence":"/affected/1/versions"}]}],"severity":"unknown","structured":{"id":"DEBIAN-CVE-2026-3172","aliases":["DEBIAN-CVE-2026-3172"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=trixie","ecosystem":"Debian:13"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1","0.8.6-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-3172.json"},"ecosystem_specific":{"urgency":"not yet assigned"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-1"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=forky","ecosystem":"Debian:14"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-3172.json"},"ecosystem_specific":{"urgency":"not yet assigned"}}],"modified":"2026-10-01T03:02:36.820093980Z","provider":"osv","references":["https://security-tracker.debian.org/tracker/CVE-2026-3172"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:45a088af-8cf7-4fdd-9143-1b84a5f45fa8","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-3172","advisory_id":"45a088af-8cf7-4fdd-9143-1b84a5f45fa8","event_types":["advisory"],"published_at":"2026-10-25T16:16:19.161697+00:00","technologies":["core-osv","pgvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-02-25T21:16:44.857+00:00","detail_url":"/advisories/advisory%3A45a088af-8cf7-4fdd-9143-1b84a5f45fa8","group":{"id":"advisory:45a088af-8cf7-4fdd-9143-1b84a5f45fa8","revision":1,"primary_event_id":55927,"change":"published","superseded_by":[],"changed":{"id":55927,"cve_ids":[],"payload":{"kind":"advisory","title":"DEBIAN-CVE-2026-3172","summary":"Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.","evidence":"osv:DEBIAN-CVE-2026-3172","products":[{"name":{"value":"pgvector","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/0/versions"},{"value":"0.8.1-1","evidence":"/affected/0/versions"},{"value":"0.8.1-2","evidence":"/affected/0/versions"},{"value":"0.8.2-1","evidence":"/affected/0/versions"},{"value":"0.8.3-1","evidence":"/affected/0/versions"},{"value":"0.8.4-1","evidence":"/affected/0/versions"},{"value":"0.8.5-1","evidence":"/affected/0/versions"},{"value":"0.8.6-1","evidence":"/affected/0/versions"}]},{"name":{"value":"pgvector","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.2-1","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/1/versions"},{"value":"0.8.1-1","evidence":"/affected/1/versions"},{"value":"0.8.1-2","evidence":"/affected/1/versions"}]}],"severity":"unknown","structured":{"id":"DEBIAN-CVE-2026-3172","aliases":["DEBIAN-CVE-2026-3172"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=trixie","ecosystem":"Debian:13"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1","0.8.6-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-3172.json"},"ecosystem_specific":{"urgency":"not yet assigned"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-1"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=forky","ecosystem":"Debian:14"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-3172.json"},"ecosystem_specific":{"urgency":"not yet assigned"}}],"modified":"2026-10-01T03:02:36.820093980Z","provider":"osv","references":["https://security-tracker.debian.org/tracker/CVE-2026-3172"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:45a088af-8cf7-4fdd-9143-1b84a5f45fa8","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-3172","advisory_id":"45a088af-8cf7-4fdd-9143-1b84a5f45fa8","event_types":["advisory"],"published_at":"2026-10-25T16:16:19.161697+00:00","technologies":["core-osv","pgvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-02-25T21:16:44.857+00:00","detail_url":"/events/55927"},"members":[{"id":55927,"cve_ids":[],"payload":{"kind":"advisory","title":"DEBIAN-CVE-2026-3172","summary":"Buffer overflow in parallel HNSW index build in pgvector 0.6.0 through 0.8.1 allows a database user to leak sensitive data from other relations or crash the database server.","evidence":"osv:DEBIAN-CVE-2026-3172","products":[{"name":{"value":"pgvector","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/0/versions"},{"value":"0.8.1-1","evidence":"/affected/0/versions"},{"value":"0.8.1-2","evidence":"/affected/0/versions"},{"value":"0.8.2-1","evidence":"/affected/0/versions"},{"value":"0.8.3-1","evidence":"/affected/0/versions"},{"value":"0.8.4-1","evidence":"/affected/0/versions"},{"value":"0.8.5-1","evidence":"/affected/0/versions"},{"value":"0.8.6-1","evidence":"/affected/0/versions"}]},{"name":{"value":"pgvector","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0.8.2-1","evidence":"/affected/1/ranges"}],"affected_versions":[{"value":"0.8.0-1","evidence":"/affected/1/versions"},{"value":"0.8.1-1","evidence":"/affected/1/versions"},{"value":"0.8.1-2","evidence":"/affected/1/versions"}]}],"severity":"unknown","structured":{"id":"DEBIAN-CVE-2026-3172","aliases":["DEBIAN-CVE-2026-3172"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=trixie","ecosystem":"Debian:13"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2","0.8.2-1","0.8.3-1","0.8.4-1","0.8.5-1","0.8.6-1"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-3172.json"},"ecosystem_specific":{"urgency":"not yet assigned"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.2-1"}]}],"package":{"name":"pgvector","purl":"pkg:deb/debian/pgvector?arch=source&distro=forky","ecosystem":"Debian:14"},"versions":["0.8.0-1","0.8.1-1","0.8.1-2"],"database_specific":{"source":"https://storage.googleapis.com/debian-osv/debian-cve-osv/DEBIAN-CVE-2026-3172.json"},"ecosystem_specific":{"urgency":"not yet assigned"}}],"modified":"2026-10-01T03:02:36.820093980Z","provider":"osv","references":["https://security-tracker.debian.org/tracker/CVE-2026-3172"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:45a088af-8cf7-4fdd-9143-1b84a5f45fa8","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/DEBIAN-CVE-2026-3172","advisory_id":"45a088af-8cf7-4fdd-9143-1b84a5f45fa8","event_types":["advisory"],"published_at":"2026-10-25T16:16:19.161697+00:00","technologies":["core-osv","pgvector"],"context_update":false,"extraction_method":"structured","source_published_at":"2026-02-25T21:16:44.857+00:00","detail_url":"/events/55927"}]}},{"id":22470,"cve_ids":[],"payload":{"kind":"advisory","title":"Red Hat Security Advisory: postgresql:16 security update","summary":"Red Hat Security Advisory: postgresql:16 security update","evidence":"osv:RHSA-2025:14827","products":[{"name":{"value":"pg_repack","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:1.5.1-1.module+el9.6.0+22880+6b241eec","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pg_repack-debuginfo","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:1.5.1-1.module+el9.6.0+22880+6b241eec","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"pg_repack-debugsource","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:1.5.1-1.module+el9.6.0+22880+6b241eec","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"pgaudit","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.0-1.module+el9.4.0+20427+07482b8c","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"pgaudit-debuginfo","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.0-1.module+el9.4.0+20427+07482b8c","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"pgaudit-debugsource","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.0-1.module+el9.4.0+20427+07482b8c","evidence":"/affected/5/ranges"}],"affected_versions":[]},{"name":{"value":"pgvector","evidence":"/affected/6/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52","evidence":"/affected/6/ranges"}],"affected_versions":[]},{"name":{"value":"pgvector-debuginfo","evidence":"/affected/7/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52","evidence":"/affected/7/ranges"}],"affected_versions":[]},{"name":{"value":"pgvector-debugsource","evidence":"/affected/8/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52","evidence":"/affected/8/ranges"}],"affected_versions":[]},{"name":{"value":"postgres-decoderbufs","evidence":"/affected/9/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c","evidence":"/affected/9/ranges"}],"affected_versions":[]},{"name":{"value":"postgres-decoderbufs-debuginfo","evidence":"/affected/10/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c","evidence":"/affected/10/ranges"}],"affected_versions":[]},{"name":{"value":"postgres-decoderbufs-debugsource","evidence":"/affected/11/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c","evidence":"/affected/11/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql","evidence":"/affected/12/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/12/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-contrib","evidence":"/affected/13/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/13/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-contrib-debuginfo","evidence":"/affected/14/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/14/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-debuginfo","evidence":"/affected/15/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/15/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-debugsource","evidence":"/affected/16/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/16/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-docs","evidence":"/affected/17/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/17/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-docs-debuginfo","evidence":"/affected/18/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/18/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-plperl","evidence":"/affected/19/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/19/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-plperl-debuginfo","evidence":"/affected/20/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/20/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-plpython3","evidence":"/affected/21/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/21/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-plpython3-debuginfo","evidence":"/affected/22/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/22/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-pltcl","evidence":"/affected/23/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/23/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-pltcl-debuginfo","evidence":"/affected/24/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/24/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-private-devel","evidence":"/affected/25/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/25/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-private-libs","evidence":"/affected/26/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/26/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-private-libs-debuginfo","evidence":"/affected/27/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/27/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-server","evidence":"/affected/28/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/28/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-server-debuginfo","evidence":"/affected/29/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/29/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-server-devel","evidence":"/affected/30/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/30/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-server-devel-debuginfo","evidence":"/affected/31/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/31/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-static","evidence":"/affected/32/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/32/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-test","evidence":"/affected/33/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/33/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-test-debuginfo","evidence":"/affected/34/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/34/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-test-rpm-macros","evidence":"/affected/35/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/35/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-upgrade","evidence":"/affected/36/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/36/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-upgrade-debuginfo","evidence":"/affected/37/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/37/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-upgrade-devel","evidence":"/affected/38/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/38/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-upgrade-devel-debuginfo","evidence":"/affected/39/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/39/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"RHSA-2025:14827","aliases":["RHSA-2025:14827"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.module+el9.6.0+22880+6b241eec"}]}],"package":{"name":"pg_repack","purl":"pkg:rpm/redhat/pg_repack","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.module+el9.6.0+22880+6b241eec"}]}],"package":{"name":"pg_repack-debuginfo","purl":"pkg:rpm/redhat/pg_repack-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.module+el9.6.0+22880+6b241eec"}]}],"package":{"name":"pg_repack-debugsource","purl":"pkg:rpm/redhat/pg_repack-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.0-1.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"pgaudit","purl":"pkg:rpm/redhat/pgaudit","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.0-1.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"pgaudit-debuginfo","purl":"pkg:rpm/redhat/pgaudit-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.0-1.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"pgaudit-debugsource","purl":"pkg:rpm/redhat/pgaudit-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52"}]}],"package":{"name":"pgvector","purl":"pkg:rpm/redhat/pgvector","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52"}]}],"package":{"name":"pgvector-debuginfo","purl":"pkg:rpm/redhat/pgvector-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52"}]}],"package":{"name":"pgvector-debugsource","purl":"pkg:rpm/redhat/pgvector-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"postgres-decoderbufs","purl":"pkg:rpm/redhat/postgres-decoderbufs","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"postgres-decoderbufs-debuginfo","purl":"pkg:rpm/redhat/postgres-decoderbufs-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"postgres-decoderbufs-debugsource","purl":"pkg:rpm/redhat/postgres-decoderbufs-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql","purl":"pkg:rpm/redhat/postgresql","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-contrib","purl":"pkg:rpm/redhat/postgresql-contrib","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-contrib-debuginfo","purl":"pkg:rpm/redhat/postgresql-contrib-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-debuginfo","purl":"pkg:rpm/redhat/postgresql-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-debugsource","purl":"pkg:rpm/redhat/postgresql-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-docs","purl":"pkg:rpm/redhat/postgresql-docs","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-docs-debuginfo","purl":"pkg:rpm/redhat/postgresql-docs-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-plperl","purl":"pkg:rpm/redhat/postgresql-plperl","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-plperl-debuginfo","purl":"pkg:rpm/redhat/postgresql-plperl-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-plpython3","purl":"pkg:rpm/redhat/postgresql-plpython3","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-plpython3-debuginfo","purl":"pkg:rpm/redhat/postgresql-plpython3-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-pltcl","purl":"pkg:rpm/redhat/postgresql-pltcl","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-pltcl-debuginfo","purl":"pkg:rpm/redhat/postgresql-pltcl-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-private-devel","purl":"pkg:rpm/redhat/postgresql-private-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-private-libs","purl":"pkg:rpm/redhat/postgresql-private-libs","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-private-libs-debuginfo","purl":"pkg:rpm/redhat/postgresql-private-libs-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-server","purl":"pkg:rpm/redhat/postgresql-server","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-server-debuginfo","purl":"pkg:rpm/redhat/postgresql-server-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-server-devel","purl":"pkg:rpm/redhat/postgresql-server-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-server-devel-debuginfo","purl":"pkg:rpm/redhat/postgresql-server-devel-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-static","purl":"pkg:rpm/redhat/postgresql-static","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-test","purl":"pkg:rpm/redhat/postgresql-test","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-test-debuginfo","purl":"pkg:rpm/redhat/postgresql-test-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-test-rpm-macros","purl":"pkg:rpm/redhat/postgresql-test-rpm-macros","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-upgrade","purl":"pkg:rpm/redhat/postgresql-upgrade","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-upgrade-debuginfo","purl":"pkg:rpm/redhat/postgresql-upgrade-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-upgrade-devel","purl":"pkg:rpm/redhat/postgresql-upgrade-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-upgrade-devel-debuginfo","purl":"pkg:rpm/redhat/postgresql-upgrade-devel-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}}],"modified":"2026-09-28T10:04:04Z","provider":"osv","references":["https://access.redhat.com/errata/RHSA-2025:14827","https://access.redhat.com/security/updates/classification/#important","https://bugzilla.redhat.com/show_bug.cgi?id=2388551","https://bugzilla.redhat.com/show_bug.cgi?id=2388553","https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14827.json","https://access.redhat.com/security/cve/CVE-2025-4207","https://bugzilla.redhat.com/show_bug.cgi?id=2365111","https://www.cve.org/CVERecord?id=CVE-2025-4207","https://nvd.nist.gov/vuln/detail/CVE-2025-4207","https://www.postgresql.org/support/security/CVE-2025-4207/","https://access.redhat.com/security/cve/CVE-2025-8713","https://bugzilla.redhat.com/show_bug.cgi?id=2388550","https://www.cve.org/CVERecord?id=CVE-2025-8713","https://nvd.nist.gov/vuln/detail/CVE-2025-8713","https://www.postgresql.org/support/security/CVE-2025-8713/","https://access.redhat.com/security/cve/CVE-2025-8714","https://www.cve.org/CVERecord?id=CVE-2025-8714","https://nvd.nist.gov/vuln/detail/CVE-2025-8714","https://www.postgresql.org/support/security/CVE-2025-8714/","https://access.redhat.com/security/cve/CVE-2025-8715","https://www.cve.org/CVERecord?id=CVE-2025-8715","https://nvd.nist.gov/vuln/detail/CVE-2025-8715","https://www.postgresql.org/support/security/CVE-2025-8715/"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:42b4db0d-f710-4bc6-8435-a954242eabfe","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/RHSA-2025%3A14827","advisory_id":"42b4db0d-f710-4bc6-8435-a954242eabfe","event_types":["advisory"],"published_at":"2026-10-25T05:59:50.737555+00:00","technologies":["core-osv","pg-repack","pg-repack-debuginfo","pg-repack-debugsource","pgaudit","pgaudit-debuginfo","pgaudit-debugsource","pgvector","pgvector-debuginfo","pgvector-debugsource","postgres-decoderbufs","postgres-decoderbufs-debuginfo","postgres-decoderbufs-debugsource","postgresql","postgresql-contrib","postgresql-contrib-debuginfo","postgresql-debuginfo","postgresql-debugsource","postgresql-docs","postgresql-docs-debuginfo","postgresql-plperl","postgresql-plperl-debuginfo","postgresql-plpython3","postgresql-plpython3-debuginfo","postgresql-pltcl","postgresql-pltcl-debuginfo","postgresql-private-devel","postgresql-private-libs","postgresql-private-libs-debuginfo","postgresql-server","postgresql-server-debuginfo","postgresql-server-devel","postgresql-server-devel-debuginfo","postgresql-static","postgresql-test","postgresql-test-debuginfo","postgresql-test-rpm-macros","postgresql-upgrade","postgresql-upgrade-debuginfo","postgresql-upgrade-devel","postgresql-upgrade-devel-debuginfo"],"context_update":false,"extraction_method":"structured","source_published_at":"2025-08-31T10:13:47+00:00","detail_url":"/advisories/advisory%3A42b4db0d-f710-4bc6-8435-a954242eabfe","group":{"id":"advisory:42b4db0d-f710-4bc6-8435-a954242eabfe","revision":1,"primary_event_id":22308,"change":"published","superseded_by":[],"changed":{"id":22308,"cve_ids":[],"payload":{"kind":"advisory","title":"Red Hat Security Advisory: postgresql:16 security update","summary":"Red Hat Security Advisory: postgresql:16 security update","evidence":"osv:RHSA-2025:14827","products":[{"name":{"value":"pg_repack","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:1.5.1-1.module+el9.6.0+22880+6b241eec","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pg_repack-debuginfo","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:1.5.1-1.module+el9.6.0+22880+6b241eec","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"pg_repack-debugsource","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:1.5.1-1.module+el9.6.0+22880+6b241eec","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"pgaudit","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.0-1.module+el9.4.0+20427+07482b8c","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"pgaudit-debuginfo","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.0-1.module+el9.4.0+20427+07482b8c","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"pgaudit-debugsource","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.0-1.module+el9.4.0+20427+07482b8c","evidence":"/affected/5/ranges"}],"affected_versions":[]},{"name":{"value":"pgvector","evidence":"/affected/6/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52","evidence":"/affected/6/ranges"}],"affected_versions":[]},{"name":{"value":"pgvector-debuginfo","evidence":"/affected/7/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52","evidence":"/affected/7/ranges"}],"affected_versions":[]},{"name":{"value":"pgvector-debugsource","evidence":"/affected/8/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52","evidence":"/affected/8/ranges"}],"affected_versions":[]},{"name":{"value":"postgres-decoderbufs","evidence":"/affected/9/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c","evidence":"/affected/9/ranges"}],"affected_versions":[]},{"name":{"value":"postgres-decoderbufs-debuginfo","evidence":"/affected/10/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c","evidence":"/affected/10/ranges"}],"affected_versions":[]},{"name":{"value":"postgres-decoderbufs-debugsource","evidence":"/affected/11/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c","evidence":"/affected/11/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql","evidence":"/affected/12/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/12/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-contrib","evidence":"/affected/13/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/13/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-contrib-debuginfo","evidence":"/affected/14/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/14/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-debuginfo","evidence":"/affected/15/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/15/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-debugsource","evidence":"/affected/16/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/16/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-docs","evidence":"/affected/17/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/17/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-docs-debuginfo","evidence":"/affected/18/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/18/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-plperl","evidence":"/affected/19/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/19/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-plperl-debuginfo","evidence":"/affected/20/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/20/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-plpython3","evidence":"/affected/21/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/21/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-plpython3-debuginfo","evidence":"/affected/22/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/22/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-pltcl","evidence":"/affected/23/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/23/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-pltcl-debuginfo","evidence":"/affected/24/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/24/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-private-devel","evidence":"/affected/25/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/25/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-private-libs","evidence":"/affected/26/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/26/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-private-libs-debuginfo","evidence":"/affected/27/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/27/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-server","evidence":"/affected/28/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/28/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-server-debuginfo","evidence":"/affected/29/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/29/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-server-devel","evidence":"/affected/30/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/30/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-server-devel-debuginfo","evidence":"/affected/31/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/31/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-static","evidence":"/affected/32/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/32/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-test","evidence":"/affected/33/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/33/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-test-debuginfo","evidence":"/affected/34/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/34/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-test-rpm-macros","evidence":"/affected/35/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/35/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-upgrade","evidence":"/affected/36/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/36/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-upgrade-debuginfo","evidence":"/affected/37/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/37/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-upgrade-devel","evidence":"/affected/38/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/38/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-upgrade-devel-debuginfo","evidence":"/affected/39/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/39/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"RHSA-2025:14827","aliases":["RHSA-2025:14827"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.module+el9.6.0+22880+6b241eec"}]}],"package":{"name":"pg_repack","purl":"pkg:rpm/redhat/pg_repack","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.module+el9.6.0+22880+6b241eec"}]}],"package":{"name":"pg_repack-debuginfo","purl":"pkg:rpm/redhat/pg_repack-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.module+el9.6.0+22880+6b241eec"}]}],"package":{"name":"pg_repack-debugsource","purl":"pkg:rpm/redhat/pg_repack-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.0-1.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"pgaudit","purl":"pkg:rpm/redhat/pgaudit","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.0-1.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"pgaudit-debuginfo","purl":"pkg:rpm/redhat/pgaudit-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.0-1.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"pgaudit-debugsource","purl":"pkg:rpm/redhat/pgaudit-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52"}]}],"package":{"name":"pgvector","purl":"pkg:rpm/redhat/pgvector","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52"}]}],"package":{"name":"pgvector-debuginfo","purl":"pkg:rpm/redhat/pgvector-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52"}]}],"package":{"name":"pgvector-debugsource","purl":"pkg:rpm/redhat/pgvector-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"postgres-decoderbufs","purl":"pkg:rpm/redhat/postgres-decoderbufs","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"postgres-decoderbufs-debuginfo","purl":"pkg:rpm/redhat/postgres-decoderbufs-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"postgres-decoderbufs-debugsource","purl":"pkg:rpm/redhat/postgres-decoderbufs-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql","purl":"pkg:rpm/redhat/postgresql","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-contrib","purl":"pkg:rpm/redhat/postgresql-contrib","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-contrib-debuginfo","purl":"pkg:rpm/redhat/postgresql-contrib-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-debuginfo","purl":"pkg:rpm/redhat/postgresql-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-debugsource","purl":"pkg:rpm/redhat/postgresql-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-docs","purl":"pkg:rpm/redhat/postgresql-docs","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-docs-debuginfo","purl":"pkg:rpm/redhat/postgresql-docs-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-plperl","purl":"pkg:rpm/redhat/postgresql-plperl","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-plperl-debuginfo","purl":"pkg:rpm/redhat/postgresql-plperl-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-plpython3","purl":"pkg:rpm/redhat/postgresql-plpython3","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-plpython3-debuginfo","purl":"pkg:rpm/redhat/postgresql-plpython3-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-pltcl","purl":"pkg:rpm/redhat/postgresql-pltcl","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-pltcl-debuginfo","purl":"pkg:rpm/redhat/postgresql-pltcl-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-private-devel","purl":"pkg:rpm/redhat/postgresql-private-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-private-libs","purl":"pkg:rpm/redhat/postgresql-private-libs","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-private-libs-debuginfo","purl":"pkg:rpm/redhat/postgresql-private-libs-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-server","purl":"pkg:rpm/redhat/postgresql-server","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-server-debuginfo","purl":"pkg:rpm/redhat/postgresql-server-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-server-devel","purl":"pkg:rpm/redhat/postgresql-server-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-server-devel-debuginfo","purl":"pkg:rpm/redhat/postgresql-server-devel-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-static","purl":"pkg:rpm/redhat/postgresql-static","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-test","purl":"pkg:rpm/redhat/postgresql-test","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-test-debuginfo","purl":"pkg:rpm/redhat/postgresql-test-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-test-rpm-macros","purl":"pkg:rpm/redhat/postgresql-test-rpm-macros","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-upgrade","purl":"pkg:rpm/redhat/postgresql-upgrade","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-upgrade-debuginfo","purl":"pkg:rpm/redhat/postgresql-upgrade-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-upgrade-devel","purl":"pkg:rpm/redhat/postgresql-upgrade-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-upgrade-devel-debuginfo","purl":"pkg:rpm/redhat/postgresql-upgrade-devel-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}}],"modified":"2026-09-28T10:04:04Z","provider":"osv","references":["https://access.redhat.com/errata/RHSA-2025:14827","https://access.redhat.com/security/updates/classification/#important","https://bugzilla.redhat.com/show_bug.cgi?id=2388551","https://bugzilla.redhat.com/show_bug.cgi?id=2388553","https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14827.json","https://access.redhat.com/security/cve/CVE-2025-4207","https://bugzilla.redhat.com/show_bug.cgi?id=2365111","https://www.cve.org/CVERecord?id=CVE-2025-4207","https://nvd.nist.gov/vuln/detail/CVE-2025-4207","https://www.postgresql.org/support/security/CVE-2025-4207/","https://access.redhat.com/security/cve/CVE-2025-8713","https://bugzilla.redhat.com/show_bug.cgi?id=2388550","https://www.cve.org/CVERecord?id=CVE-2025-8713","https://nvd.nist.gov/vuln/detail/CVE-2025-8713","https://www.postgresql.org/support/security/CVE-2025-8713/","https://access.redhat.com/security/cve/CVE-2025-8714","https://www.cve.org/CVERecord?id=CVE-2025-8714","https://nvd.nist.gov/vuln/detail/CVE-2025-8714","https://www.postgresql.org/support/security/CVE-2025-8714/","https://access.redhat.com/security/cve/CVE-2025-8715","https://www.cve.org/CVERecord?id=CVE-2025-8715","https://nvd.nist.gov/vuln/detail/CVE-2025-8715","https://www.postgresql.org/support/security/CVE-2025-8715/"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:42b4db0d-f710-4bc6-8435-a954242eabfe","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/RHSA-2025%3A14827","advisory_id":"42b4db0d-f710-4bc6-8435-a954242eabfe","event_types":["advisory"],"published_at":"2026-10-25T05:59:50.737555+00:00","technologies":["core-osv","pg-repack","pg-repack-debuginfo","pg-repack-debugsource","pgaudit","pgaudit-debuginfo","pgaudit-debugsource","pgvector","pgvector-debuginfo","pgvector-debugsource","postgres-decoderbufs","postgres-decoderbufs-debuginfo","postgres-decoderbufs-debugsource","postgresql","postgresql-contrib","postgresql-contrib-debuginfo","postgresql-debuginfo","postgresql-debugsource","postgresql-docs","postgresql-docs-debuginfo","postgresql-plperl","postgresql-plperl-debuginfo","postgresql-plpython3","postgresql-plpython3-debuginfo","postgresql-pltcl","postgresql-pltcl-debuginfo","postgresql-private-devel","postgresql-private-libs","postgresql-private-libs-debuginfo","postgresql-server","postgresql-server-debuginfo","postgresql-server-devel","postgresql-server-devel-debuginfo","postgresql-static","postgresql-test","postgresql-test-debuginfo","postgresql-test-rpm-macros","postgresql-upgrade","postgresql-upgrade-debuginfo","postgresql-upgrade-devel","postgresql-upgrade-devel-debuginfo"],"context_update":false,"extraction_method":"structured","source_published_at":"2025-08-31T10:13:47+00:00","detail_url":"/events/22308"},"members":[{"id":22308,"cve_ids":[],"payload":{"kind":"advisory","title":"Red Hat Security Advisory: postgresql:16 security update","summary":"Red Hat Security Advisory: postgresql:16 security update","evidence":"osv:RHSA-2025:14827","products":[{"name":{"value":"pg_repack","evidence":"/affected/0/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:1.5.1-1.module+el9.6.0+22880+6b241eec","evidence":"/affected/0/ranges"}],"affected_versions":[]},{"name":{"value":"pg_repack-debuginfo","evidence":"/affected/1/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:1.5.1-1.module+el9.6.0+22880+6b241eec","evidence":"/affected/1/ranges"}],"affected_versions":[]},{"name":{"value":"pg_repack-debugsource","evidence":"/affected/2/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:1.5.1-1.module+el9.6.0+22880+6b241eec","evidence":"/affected/2/ranges"}],"affected_versions":[]},{"name":{"value":"pgaudit","evidence":"/affected/3/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.0-1.module+el9.4.0+20427+07482b8c","evidence":"/affected/3/ranges"}],"affected_versions":[]},{"name":{"value":"pgaudit-debuginfo","evidence":"/affected/4/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.0-1.module+el9.4.0+20427+07482b8c","evidence":"/affected/4/ranges"}],"affected_versions":[]},{"name":{"value":"pgaudit-debugsource","evidence":"/affected/5/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.0-1.module+el9.4.0+20427+07482b8c","evidence":"/affected/5/ranges"}],"affected_versions":[]},{"name":{"value":"pgvector","evidence":"/affected/6/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52","evidence":"/affected/6/ranges"}],"affected_versions":[]},{"name":{"value":"pgvector-debuginfo","evidence":"/affected/7/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52","evidence":"/affected/7/ranges"}],"affected_versions":[]},{"name":{"value":"pgvector-debugsource","evidence":"/affected/8/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52","evidence":"/affected/8/ranges"}],"affected_versions":[]},{"name":{"value":"postgres-decoderbufs","evidence":"/affected/9/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c","evidence":"/affected/9/ranges"}],"affected_versions":[]},{"name":{"value":"postgres-decoderbufs-debuginfo","evidence":"/affected/10/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c","evidence":"/affected/10/ranges"}],"affected_versions":[]},{"name":{"value":"postgres-decoderbufs-debugsource","evidence":"/affected/11/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c","evidence":"/affected/11/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql","evidence":"/affected/12/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/12/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-contrib","evidence":"/affected/13/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/13/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-contrib-debuginfo","evidence":"/affected/14/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/14/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-debuginfo","evidence":"/affected/15/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/15/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-debugsource","evidence":"/affected/16/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/16/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-docs","evidence":"/affected/17/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/17/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-docs-debuginfo","evidence":"/affected/18/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/18/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-plperl","evidence":"/affected/19/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/19/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-plperl-debuginfo","evidence":"/affected/20/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/20/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-plpython3","evidence":"/affected/21/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/21/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-plpython3-debuginfo","evidence":"/affected/22/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/22/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-pltcl","evidence":"/affected/23/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/23/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-pltcl-debuginfo","evidence":"/affected/24/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/24/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-private-devel","evidence":"/affected/25/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/25/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-private-libs","evidence":"/affected/26/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/26/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-private-libs-debuginfo","evidence":"/affected/27/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/27/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-server","evidence":"/affected/28/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/28/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-server-debuginfo","evidence":"/affected/29/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/29/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-server-devel","evidence":"/affected/30/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/30/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-server-devel-debuginfo","evidence":"/affected/31/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/31/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-static","evidence":"/affected/32/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/32/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-test","evidence":"/affected/33/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/33/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-test-debuginfo","evidence":"/affected/34/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/34/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-test-rpm-macros","evidence":"/affected/35/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/35/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-upgrade","evidence":"/affected/36/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/36/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-upgrade-debuginfo","evidence":"/affected/37/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/37/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-upgrade-devel","evidence":"/affected/38/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/38/ranges"}],"affected_versions":[]},{"name":{"value":"postgresql-upgrade-devel-debuginfo","evidence":"/affected/39/package/name"},"prerequisites":[],"fixed_versions":[{"value":"0:16.10-1.module+el9.6.0+23420+848a4539","evidence":"/affected/39/ranges"}],"affected_versions":[]}],"severity":"unknown","structured":{"id":"RHSA-2025:14827","aliases":["RHSA-2025:14827"],"metrics":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H"}],"affected":[{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.module+el9.6.0+22880+6b241eec"}]}],"package":{"name":"pg_repack","purl":"pkg:rpm/redhat/pg_repack","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.module+el9.6.0+22880+6b241eec"}]}],"package":{"name":"pg_repack-debuginfo","purl":"pkg:rpm/redhat/pg_repack-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.5.1-1.module+el9.6.0+22880+6b241eec"}]}],"package":{"name":"pg_repack-debugsource","purl":"pkg:rpm/redhat/pg_repack-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.0-1.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"pgaudit","purl":"pkg:rpm/redhat/pgaudit","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.0-1.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"pgaudit-debuginfo","purl":"pkg:rpm/redhat/pgaudit-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.0-1.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"pgaudit-debugsource","purl":"pkg:rpm/redhat/pgaudit-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52"}]}],"package":{"name":"pgvector","purl":"pkg:rpm/redhat/pgvector","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52"}]}],"package":{"name":"pgvector-debuginfo","purl":"pkg:rpm/redhat/pgvector-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.6.2-2.module+el9.6.0+22979+c3d78d52"}]}],"package":{"name":"pgvector-debugsource","purl":"pkg:rpm/redhat/pgvector-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"postgres-decoderbufs","purl":"pkg:rpm/redhat/postgres-decoderbufs","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"postgres-decoderbufs-debuginfo","purl":"pkg:rpm/redhat/postgres-decoderbufs-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.0-1.Final.module+el9.4.0+20427+07482b8c"}]}],"package":{"name":"postgres-decoderbufs-debugsource","purl":"pkg:rpm/redhat/postgres-decoderbufs-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql","purl":"pkg:rpm/redhat/postgresql","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-contrib","purl":"pkg:rpm/redhat/postgresql-contrib","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-contrib-debuginfo","purl":"pkg:rpm/redhat/postgresql-contrib-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-debuginfo","purl":"pkg:rpm/redhat/postgresql-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-debugsource","purl":"pkg:rpm/redhat/postgresql-debugsource","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-docs","purl":"pkg:rpm/redhat/postgresql-docs","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-docs-debuginfo","purl":"pkg:rpm/redhat/postgresql-docs-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-plperl","purl":"pkg:rpm/redhat/postgresql-plperl","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-plperl-debuginfo","purl":"pkg:rpm/redhat/postgresql-plperl-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-plpython3","purl":"pkg:rpm/redhat/postgresql-plpython3","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-plpython3-debuginfo","purl":"pkg:rpm/redhat/postgresql-plpython3-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-pltcl","purl":"pkg:rpm/redhat/postgresql-pltcl","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-pltcl-debuginfo","purl":"pkg:rpm/redhat/postgresql-pltcl-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-private-devel","purl":"pkg:rpm/redhat/postgresql-private-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-private-libs","purl":"pkg:rpm/redhat/postgresql-private-libs","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-private-libs-debuginfo","purl":"pkg:rpm/redhat/postgresql-private-libs-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-server","purl":"pkg:rpm/redhat/postgresql-server","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-server-debuginfo","purl":"pkg:rpm/redhat/postgresql-server-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-server-devel","purl":"pkg:rpm/redhat/postgresql-server-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-server-devel-debuginfo","purl":"pkg:rpm/redhat/postgresql-server-devel-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-static","purl":"pkg:rpm/redhat/postgresql-static","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-test","purl":"pkg:rpm/redhat/postgresql-test","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-test-debuginfo","purl":"pkg:rpm/redhat/postgresql-test-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-test-rpm-macros","purl":"pkg:rpm/redhat/postgresql-test-rpm-macros","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-upgrade","purl":"pkg:rpm/redhat/postgresql-upgrade","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-upgrade-debuginfo","purl":"pkg:rpm/redhat/postgresql-upgrade-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-upgrade-devel","purl":"pkg:rpm/redhat/postgresql-upgrade-devel","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}},{"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:16.10-1.module+el9.6.0+23420+848a4539"}]}],"package":{"name":"postgresql-upgrade-devel-debuginfo","purl":"pkg:rpm/redhat/postgresql-upgrade-devel-debuginfo","ecosystem":"Red Hat:enterprise_linux:9::appstream"},"database_specific":{"source":"https://security.access.redhat.com/data/osv/RHSA-2025:14827.json"}}],"modified":"2026-09-28T10:04:04Z","provider":"osv","references":["https://access.redhat.com/errata/RHSA-2025:14827","https://access.redhat.com/security/updates/classification/#important","https://bugzilla.redhat.com/show_bug.cgi?id=2388551","https://bugzilla.redhat.com/show_bug.cgi?id=2388553","https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_14827.json","https://access.redhat.com/security/cve/CVE-2025-4207","https://bugzilla.redhat.com/show_bug.cgi?id=2365111","https://www.cve.org/CVERecord?id=CVE-2025-4207","https://nvd.nist.gov/vuln/detail/CVE-2025-4207","https://www.postgresql.org/support/security/CVE-2025-4207/","https://access.redhat.com/security/cve/CVE-2025-8713","https://bugzilla.redhat.com/show_bug.cgi?id=2388550","https://www.cve.org/CVERecord?id=CVE-2025-8713","https://nvd.nist.gov/vuln/detail/CVE-2025-8713","https://www.postgresql.org/support/security/CVE-2025-8713/","https://access.redhat.com/security/cve/CVE-2025-8714","https://www.cve.org/CVERecord?id=CVE-2025-8714","https://nvd.nist.gov/vuln/detail/CVE-2025-8714","https://www.postgresql.org/support/security/CVE-2025-8714/","https://access.redhat.com/security/cve/CVE-2025-8715","https://www.cve.org/CVERecord?id=CVE-2025-8715","https://nvd.nist.gov/vuln/detail/CVE-2025-8715","https://www.postgresql.org/support/security/CVE-2025-8715/"]},"related_cves":[],"security_relevant":true,"severity_evidence":null},"group_id":"advisory:42b4db0d-f710-4bc6-8435-a954242eabfe","priority":{"reasons":["unrated_security_fix"],"severity":"unknown","linked_cves":[],"fix_available":true,"known_exploited":false,"publisher_severity":"unknown"},"revision":1,"source_id":"core-osv","source_url":"https://osv.dev/vulnerability/RHSA-2025%3A14827","advisory_id":"42b4db0d-f710-4bc6-8435-a954242eabfe","event_types":["advisory"],"published_at":"2026-10-25T05:59:50.737555+00:00","technologies":["core-osv","pg-repack","pg-repack-debuginfo","pg-repack-debugsource","pgaudit","pgaudit-debuginfo","pgaudit-debugsource","pgvector","pgvector-debuginfo","pgvector-debugsource","postgres-decoderbufs","postgres-decoderbufs-debuginfo","postgres-decoderbufs-debugsource","postgresql","postgresql-contrib","postgresql-contrib-debuginfo","postgresql-debuginfo","postgresql-debugsource","postgresql-docs","postgresql-docs-debuginfo","postgresql-plperl","postgresql-plperl-debuginfo","postgresql-plpython3","postgresql-plpython3-debuginfo","postgresql-pltcl","postgresql-pltcl-debuginfo","postgresql-private-devel","postgresql-private-libs","postgresql-private-libs-debuginfo","postgresql-server","postgresql-server-debuginfo","postgresql-server-devel","postgresql-server-devel-debuginfo","postgresql-static","postgresql-test","postgresql-test-debuginfo","postgresql-test-rpm-macros","postgresql-upgrade","postgresql-upgrade-debuginfo","postgresql-upgrade-devel","postgresql-upgrade-devel-debuginfo"],"context_update":false,"extraction_method":"structured","source_published_at":"2025-08-31T10:13:47+00:00","detail_url":"/events/22308"}]}}],"next_after":75829,"next_before":22470}