Pgpartman vulnerabilities
We track 6 vulnerabilities in Pgpartman products. 6 are rated high or critical, and none are known to be exploited. The most recent was published on September 18, 2026.
Latest Pgpartman vulnerabilities
- 8.5 High severity
pg_partman: Missing Authorization
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, drop_partition_id() and drop_partition_time() use part_config.retention_schema as the target for ALTER TABLE SET SCHEMA and accept any nonempty schema name. A r
- 8.5 High severity
pg_partman: Improper Neutralization of Special Elements used in an SQL Command
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, inherit_template_properties() manually surrounds primary-key column names from pg_attribute.attname with double quotes without escaping embedded double-quote ch
- 8.5 High severity
pg_partman: Improper Neutralization of Special Elements used in an SQL Command
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, when pg_jobmon is installed and part_config.jobmon is true, exception handlers in multiple pg_partman functions place p_parent_table verbatim inside a SQL strin
- 8.5 High severity
pg_partman: Improper Neutralization of Special Elements used in an SQL Command
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, undo_partition() reads part_config.time_encoder as unrestricted text and interpolates it without identifier quoting into a dynamically executed SELECT statement
- 8.5 High severity
pg_partman: Improper Neutralization of Special Elements used in an SQL Command
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, run_maintenance(), show_partitions(), show_partition_info(), undo_partition(), and partition_data_time() interpolate the writable part_config.time_dncoder text
- 9.9 Critical severity
pg_partman: Improper Neutralization of Special Elements used in an SQL Command
pg_partman is a PostgreSQL extension that manages partitioned tables by time or ID. Prior to 5.5.0, create_partition_time() reads the writable part_config.time_encoder text value and interpolates it without identifier quoting into a dynamically executed SELECT