postgrex vulnerabilities (Hex)

3 vulnerabilities.

• postgrex Hex SQL injection via the :comment option in Postgrex.stream/4 CVE-2026-66838 Fix available 5.9 MediumAugust 7, 2026
• postgrex Hex SQL injection via unescaped dollar-quote in Postgrex.Notifications reconnect replay causes notification denial of service CVE-2026-58225 Public exploitFix available 2.1 LowJuly 10, 2026
• postgrex Hex SQL injection via channel name in Postgrex.Notifications.listen/3 and unlisten/3 CVE-2026-32687 Fix available 7.5 HighMay 12, 2026