3 spills in 2026 for Postgres
Each square is a day. Tap one to see what spilled. Heat = critical 4, high 3, medium 2, low 1, update half.
Past orders
- criticalpatched Payload: SQL Injection in SQLite and Postgres payload (npm) ### Impact A user can submit a request that exploits a SQL Injection vulnerability in Payload. You are affected if: - You use an affected Payload version. - Untrusted users can query readable collections using dynamic filters or joins. You are not affected if you use MongoDB (`@payloadcms/mongodb`). ### Patches Users should upgrade Payload packages to…
- highpatchedexploited Sangoma Switchvox SQL Injection Vulnerability Sangoma Switchvox contains a SQL injection vulnerability which allows an unauthenticated remote attacker to execute arbitrary SQL statements against the backend PostgreSQL database using a single crafted request, including database operations and remote code execution. Added to CISA KEV on 2026-09-02 (federal deadline 2026-09-05).
- highpatchedexploited Splunk Enterprise Missing Authentication for Critical Function Vulnerability Splunk Enterprise contains a missing authentication for critical function vulnerability which could allow an unauthenticated user to create or truncate arbitrary files through a PostgreSQL sidecar service endpoint. Added to CISA KEV on 2026-06-18 (federal deadline 2026-06-21).
Follow Postgres
RSS: /feed.xml?stack=postgres. JSON: /incidents.json?stack=postgres. Or add it to your usual for delivery.