JLSEC-2026-34
- Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-34.md
- Import Source
- https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-34.json
- JSON Data
- https://api.osv.dev/v1/vulns/JLSEC-2026-34
- Upstream
- Published
- 2026-04-03T13:27:15Z
- Modified
- 2026-07-18T00:00:42Z
- Severity
-
- 3.5 CVSS_V2 - AV:N/AC:M/Au:S/C:P/I:N/A:N CVSS Calculator
- 4.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
-
An information leak was discovered in postgresql in versions before 13.2, before 12.6 and before 11.11. A user having UPDATE permission but not SELECT permission to a particular column could craft queries which, under some circumstances, might disclose values from that column in error messages. An attacker could use this flaw to obtain information stored in a column they are allowed to write but not read.
- Database specific
{ "license": "CC-BY-4.0", "sources": [ { "database_specific": { "status": "Modified" }, "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2021-3393", "id": "CVE-2021-3393", "imported": "2026-07-17T21:40:40.282Z", "modified": "2026-06-17T04:05:01.073Z", "published": "2021-04-01T14:15:13.657Z", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2021-3393" } ] }- References