PG
Product
pglogical
by EnterpriseDB · last CVE Jul 28, 2026
4
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 2Low 0
Watch

Add pglogical to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-50737
7.5
0%
Jul 28
When applying replicated changes for a row that is missing one or more columns, pglogical evaluates the affected table's default expressions on the subscriber
Affected: 2 before 2.4.8
CVE-2026-50736
7.5
0%
Jul 28
The pglogical queue mechanism, used to convey out-of-band commands such as replicated DDL from a publisher to a subscriber, executes message payloads on the subscriber at the…
Affected: 2 before 2.4.8
CVE-2026-50735
6.8
0%
Jul 28
pglogical's apply worker does not sufficiently validate the length of certain fields in incoming replication protocol messages before copying them, resulting in an out-of-bounds…
Affected: 2 before 2.4.8
CVE-2026-50738
5.3
1%
Jul 28
A use-after-free condition exists in pglogical's worker signaling code, where a worker structure can be dereferenced after the underlying slot has been freed or recycled during…
Affected: 2 before 2.4.8
Showing 4