https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T16:57:09.602973+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2020:5620 ALSA-2020:5620 — Important: postgresql:12 security update 2026-10-03T16:57:09.974604+00:00

Affected: AlmaLinux:8: postgres-decoderbufs

PostgreSQL is an advanced object-relational database management system (DBMS).

The following packages have been upgraded to a later upstream version: postgresql (12.5).

Security Fix(es):

* postgresql: Reconnection can downgrade connection security settings (CVE-2020-25694)

* postgresql: Multiple features escape "security restricted operation" sandbox (CVE-2020-25695)

* postgresql: Uncontrolled search path element in logical replication (CVE-2020-14349)

* postgresql: Uncontrolled search path element in CREATE EXTENSION (CVE-2020-14350)

* postgresql: psql's \gset allows overwriting specially treated variables (CVE-2020-25696)

* postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks (CVE-2020-1720)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-00082 bdu:2021-00082 2026-10-03T16:57:09.974686+00:00 bdu:2021-00082 https://cve.radiocsirt.org/vuln/bell-cve-2020-1720 Withdrawn: BELL-CVE-2020-1720 — CVE-2020-1720 does not affect BellSoft software 2026-10-03T16:57:09.974704+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/bit-postgresql-2020-1720 BIT-postgresql-2020-1720 2026-10-03T16:57:09.974719+00:00

Affected: Bitnami: postgresql

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issue affects PostgreSQL versions before 12.2, before 11.7, before 10.12 and before 9.6.17.

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-091 certfr-2020-avi-091 — Une vulnérabilité a été découverte dans PostgreSQL . Elle permet à un attaquant de provoquer un contournement de la pol… 2026-10-03T16:57:09.974742+00:00 certfr-2020-avi-091 https://cve.radiocsirt.org/vuln/cleanstart-2026-qh42621 CLEANSTART-2026-QH42621 — Security fix for CVE-2020-1720 applied in: postgresql15 12.2-r0 2026-10-03T16:57:09.974756+00:00

Affected: CleanStart: postgresql15

Security vulnerability affects the postgresql15 package. This issue is resolved in later releases. See references for vulnerability details.

 https://cve.radiocsirt.org/vuln/euvd-2026-35581 EUVD-2026-35581 2026-10-03T16:57:09.974776+00:00 EUVD-2026-35581 https://cve.radiocsirt.org/vuln/fkie_cve-2020-1720 fkie_cve-2020-1720 2026-10-03T16:57:09.974787+00:00

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issue affects PostgreSQL versions before 12.2, before 11.7, before 10.12 and before 9.6.17.

 https://cve.radiocsirt.org/vuln/ghsa-prcp-93mm-93fm GHSA-prcp-93mm-93fm 2026-10-03T16:57:09.974815+00:00

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issue affects PostgreSQL versions before 12.2, before 11.7, before 10.12 and before 9.6.17.

 https://cve.radiocsirt.org/vuln/gsd-2020-1720 gsd-2020-1720 2026-10-03T16:57:09.974832+00:00 gsd-2020-1720 https://cve.radiocsirt.org/vuln/msrc_cve-2020-1720 msrc_CVE-2020-1720 — A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION" where sub-commands did not perform authorization chec… 2026-10-03T16:57:09.974843+00:00 msrc_CVE-2020-1720 https://cve.radiocsirt.org/vuln/opensuse-su-2020:0331-1 openSUSE-SU-2020:0331-1 — Security update for postgresql10 2026-10-03T16:57:09.974860+00:00

Security update for postgresql10

 https://cve.radiocsirt.org/vuln/rhba-2020:2396 RHBA-2020:2396 — Red Hat Bug Fix Advisory: Red Hat Virtualization Engine security, bug fix 4.3.10 2026-10-03T16:57:09.974876+00:00

postgresql: ALTER ... DEPENDS ON EXTENSION is missing authorization checks

 https://cve.radiocsirt.org/vuln/suse-ru-2020:1280-1 SUSE-RU-2020:1280-1 — Recommended update for postgresql, postgresql10, postgresql12 2026-10-03T16:57:09.974890+00:00

Recommended update for postgresql, postgresql10, postgresql12

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-1720 UBUNTU-CVE-2020-1720 2026-10-03T16:57:09.974906+00:00

Affected: Ubuntu:18.04:LTS: postgresql-10

A flaw was found in PostgreSQL's "ALTER ... DEPENDS ON EXTENSION", where sub-commands did not perform authorization checks. An authenticated attacker could use this flaw in certain configurations to perform drop objects such as function, triggers, et al., leading to database corruption. This issue affects PostgreSQL versions before 12.2, before 11.7, before 10.12 and before 9.6.17.