Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/postgresql16@16.10-1?arch=el10_0
purl pkg:rpm/redhat/postgresql16@16.10-1?arch=el10_0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 4.0
Vulnerabilities affecting this package (3)
Vulnerability Summary Fixed by
VCID-dck8-zvk3-q7f8
Aliases:
CVE-2025-4207
PostgreSQL GB18030 encoding validation can read one byte past end of allocation for text that fails validationmore details There are no reported fixed by versions.
VCID-h5sa-959y-6fh4
Aliases:
CVE-2025-8714
PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql clientmore details There are no reported fixed by versions.
VCID-wetm-n31c-e3as
Aliases:
CVE-2025-8715
PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target servermore details There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:40:19.857998+00:00 RedHat Importer Affected by VCID-dck8-zvk3-q7f8 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-4207.json 38.0.0
2026-04-01T13:37:52.106159+00:00 RedHat Importer Affected by VCID-h5sa-959y-6fh4 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-8714.json 38.0.0
2026-04-01T13:37:51.821668+00:00 RedHat Importer Affected by VCID-wetm-n31c-e3as https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2025-8715.json 38.0.0