https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T07:36:46.355701+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-04879 bdu:2021-04879 2026-10-18T07:36:46.359749+00:00 bdu:2021-04879 https://cve.radiocsirt.org/vuln/cnvd-2021-53342 cnvd-2021-53342 2026-10-18T07:36:46.359778+00:00 cnvd-2021-53342 https://cve.radiocsirt.org/vuln/euvd-2026-20884 EUVD-2026-20884 2026-10-18T07:36:46.359793+00:00 EUVD-2026-20884 https://cve.radiocsirt.org/vuln/fkie_cve-2021-3515 fkie_cve-2021-3515 2026-10-18T07:36:46.359805+00:00

A shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An attacker with CREATEDB privileges on a PostgreSQL server can craft a database name that allows execution of shell commands as the postgresql user when calling pglogical.create_subscription().

 https://cve.radiocsirt.org/vuln/ghsa-pg8h-w6r7-prw8 GHSA-pg8h-w6r7-prw8 2026-10-18T07:36:46.359832+00:00

A shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An attacker with CREATEDB privileges on a PostgreSQL server can craft a database name that allows execution of shell commands as the postgresql user when calling pglogical.create_subscription().

 https://cve.radiocsirt.org/vuln/gsd-2021-3515 gsd-2021-3515 2026-10-18T07:36:46.359849+00:00 gsd-2021-3515 https://cve.radiocsirt.org/vuln/ubuntu-cve-2021-3515 UBUNTU-CVE-2021-3515 2026-10-18T07:36:46.359860+00:00

Affected: Ubuntu:18.04:LTS: pglogical, Ubuntu:20.04:LTS: pglogical, Ubuntu:22.04:LTS: pglogical, Ubuntu:24.04:LTS: pglogical, Ubuntu:25.10: pglogical, Ubuntu:26.10: pglogical, Ubuntu:26.04:LTS: pglogical

A shell injection flaw was found in pglogical in versions before 2.3.4 and before 3.6.26. An attacker with CREATEDB privileges on a PostgreSQL server can craft a database name that allows execution of shell commands as the postgresql user when calling pglogical.create_subscription().