Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (2)
| Vulnerability |
Summary |
Aliases |
|
VCID-mu5a-vc5u-z7dv
|
Remote Code Execution
A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name.
|
GMS-2017-178
|
|
VCID-yrg7-471n-d3fg
|
Code Injection
A remote code execution vulnerability was found within the pg module when the remote database or query specifies a specially crafted column name. There are 2 likely scenarios in which one would likely be vulnerable. 1) Executing unsafe, user-supplied sql which contains a malicious column name. 2) Connecting to an untrusted database and executing a query which returns results where any of the column names are malicious.
|
CVE-2017-16082
|