Latest Releases & CVE Security Feed
Security Vulnerabilities (CVE) & Release Radar
Critical vulnerability alerts, major database releases, and remediation action plans.
Filter by Engine:
CVE Severity::
CVE-2026-1104CVSS 7.8 • HIGH
PostgreSQL
2026-09-07
PostgreSQL 17.2 Autovacuum Memory Leak Security Patch
Resolved excessive memory consumption bug during parallel autovacuum workers.
Affected Engines:
PostgreSQL 17.0 - 17.1
Action / Patch:
Upgrade to PostgreSQL 17.2 immediately or restrict autovacuum_work_mem limit.
CVE-2024-10979CVSS 8.8 • CRITICAL
PostgreSQL
2024-11-14
PostgreSQL PL/Perl Environment Variable Manipulation Code Execution
Vulnerability in PostgreSQL PL/Perl allowing non-superusers to modify sensitive environment variables and execute arbitrary code.
Affected Engines:
PostgreSQL 12 - 17 (17.1 öncesi)
Action / Patch:
Upgrade immediately to PostgreSQL 17.1, 16.5, 15.9, 14.14, or 13.17.
CVE-2024-21096CVSS 7.5 • HIGH
MySQL
2024-10-18
MySQL Server Optimizer Denial of Service (DoS) Vulnerability
Allows low-privileged authenticated users with network access to cause server hangs or complete crash via crafted optimizer queries.
Affected Engines:
MySQL 8.0.36 ve öncesi, 8.4.0
Action / Patch:
Apply Oracle Critical Patch Update (CPU) and upgrade to MySQL 8.0.37+ or 8.4.1+ LTS.