Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/postgresql96@9.6.10-1PGDG?arch=el7at
purl pkg:rpm/redhat/postgresql96@9.6.10-1PGDG?arch=el7at
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (8)
Vulnerability Summary Fixed by
VCID-5dmr-8tvd-8uen
Aliases:
CVE-2018-11627
GHSA-mq35-wqvf-r23c
Cross-site Scripting Sinatra has XSS via the Bad Request page that occurs upon a params parser exception. There are no reported fixed by versions.
VCID-7xfn-1fv3-1bgv
Aliases:
CVE-2018-1058
Uncontrolled search path element in pg_dump and other client applicationsmore details There are no reported fixed by versions.
VCID-ne9g-k8fz-dkgb
Aliases:
CVE-2018-10925
Memory disclosure and missing authorization in INSERT ... ON CONFLICT DO UPDATE.more details There are no reported fixed by versions.
VCID-sq2s-cvrs-7uhh
Aliases:
CVE-2018-10915
Certain host connection parameters defeat client-side security defensesmore details There are no reported fixed by versions.
VCID-sqa5-8yrd-qyfz
Aliases:
CVE-2018-8048
GHSA-x7rv-cr6v-4vm4
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In the Loofah gem for Ruby, denylisted HTML attributes may occur in sanitized output by republishing a crafted HTML fragment. There are no reported fixed by versions.
VCID-wcsh-zz5q-qqbf
Aliases:
CVE-2018-1053
pg_upgrade creates file of sensitive metadata under prevailing umaskmore details There are no reported fixed by versions.
VCID-xby9-avva-a3e5
Aliases:
CVE-2018-3741
GHSA-px3r-jm9g-c8w8
XSS vulnerability The gem allows attributes that are not specified in the allowlist to be present in sanitized output when input with specially-crafted HTML fragments, and these attributes can lead to an XSS attack on target applications. This issue is similar to CVE-2018-8048 in Loofah. There are no reported fixed by versions.
VCID-zrsc-vqxk-vkgx
Aliases:
CVE-2012-6685
GHSA-6wj9-77wq-jq7p
OSV-90946
Nokogiri is vulnerable to XML External Entity (XXE) attack Nokogiri before 1.5.4 is vulnerable to XXE attacks. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T14:55:28.523096+00:00 RedHat Importer Affected by VCID-zrsc-vqxk-vkgx https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2012-6685.json 38.0.0
2026-04-01T14:26:14.416330+00:00 RedHat Importer Affected by VCID-wcsh-zz5q-qqbf https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1053.json 38.0.0
2026-04-01T14:25:57.428425+00:00 RedHat Importer Affected by VCID-7xfn-1fv3-1bgv https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-1058.json 38.0.0
2026-04-01T14:25:46.323386+00:00 RedHat Importer Affected by VCID-sqa5-8yrd-qyfz https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-8048.json 38.0.0
2026-04-01T14:25:45.328265+00:00 RedHat Importer Affected by VCID-xby9-avva-a3e5 https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-3741.json 38.0.0
2026-04-01T14:24:36.422059+00:00 RedHat Importer Affected by VCID-5dmr-8tvd-8uen https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-11627.json 38.0.0
2026-04-01T14:22:53.086311+00:00 RedHat Importer Affected by VCID-ne9g-k8fz-dkgb https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10925.json 38.0.0
2026-04-01T14:22:52.930935+00:00 RedHat Importer Affected by VCID-sq2s-cvrs-7uhh https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2018-10915.json 38.0.0