JLSEC-2026-31

Source
https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-31.md
Import Source
https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-31.json
JSON Data
https://api.osv.dev/v1/vulns/JLSEC-2026-31
Upstream
Published
2026-04-03T13:27:15.647Z
Modified
2026-04-03T13:30:56.874778Z
Summary
[none]
Details

A flaw was found in postgresql in versions before 13.3, before 12.7, before 11.12, before 10.17 and before 9.6.22. While modifying certain SQL array values, missing bounds checks let authenticated database users write arbitrary bytes to a wide area of server memory. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Database specific
{
    "license": "CC-BY-4.0",
    "sources": [
        {
            "published": "2021-06-01T14:15:09.993Z",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-32027",
            "modified": "2024-11-21T06:06:44.467Z",
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-32027",
            "id": "CVE-2021-32027",
            "imported": "2026-04-03T13:13:09.875Z"
        }
    ]
}
References

Affected packages

Julia / LibPQ_jll

Package

Name
LibPQ_jll
Purl
pkg:julia/LibPQ_jll?uuid=08be9ffa-1c94-5ee5-a977-46a84ec9b350

Affected ranges

Type
SEMVER
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
14.1.0+0

Database specific

source
"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-31.json"