Advisories · Technology
cloudnative-pg.
Every CVE that names cloudnative-pg among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 9.4 CriticalCritical · CVSS 9+
CloudNativePG: Overriding operators can lead to privilege escalation in CloudNativePG for SQL queries without a fixed `search_path`
- cloudnative-pg
- CWE-426
- CVSS 8.5 High
CloudNativePG: Cleartext role passwords recorded in pg_stat_statements allow privileged tenant roles to recover the PostgreSQL superuser credential and achieve RCE in the database pod
- cloudnative-pg
- Hard-coded credentials
- CWE-256