Enterprisedb Pglogical
5 CVEs affecting Enterprisedb Pglogical. Latest disclosed: 2026-07-28. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-2506 | Medium | 5.3 | 2025-05-22 | When pglogical attempts to replicate data, it does not verify it is using a replication connection, which means a user with CONNECT access to a database config… |
CVE-2026-50738 | | 2026-07-28 | A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed o… | |
CVE-2026-50737 | | 2026-07-28 | When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressions on the subscriber… | |
CVE-2026-50736 | | 2026-07-28 | The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the su… | |
CVE-2026-50735 | | 2026-07-28 | pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting i… |