Skip to contentPgedge vulnerabilities
Newest
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server write confirmation skipped for writes that begin with a reading keywordCVE-2026-1261996.8 Medium
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server custom tools performed writes without user confirmationCVE-2026-1261983.1 Low
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server SQL injection through custom pl-do tool parametersCVE-2026-1261978.8 High
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server read-only mode can be bypassed by SQL statement smuggling through query_databaseCVE-2026-1261968.1 High
- pgedge pgedge-go-llm-libpgEdge Go LLM Library discloses provider API key fragments in error messagesCVE-2026-125328Fix available5.8 Medium
- pgedge pgedge-rag-serverpgEdge RAG Server unbounded corpus read allows resource exhaustion from unauthenticated requestsCVE-2026-125327Fix available7.5 High
- pgedge pgedge-rag-serverpgEdge RAG Server discloses part of the configured provider credential through API error messagespgEdge RAG Server discloses part of the configured provider credential through API error messagesCVE-2026-125326Fix available5.8 Medium
- pgedge pgedge-rag-serverpgEdge RAG Server shared keyword index leaked results between concurrent unauthenticated requestsCVE-2026-125325Fix available5.9 Medium
- pgedge control-planepgEdge Control Plane generates pg_hba.conf with trust authentication for local and loopback connectionsCVE-2026-125323Fix available7.8 High
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server SQL injection in the count_rows where parameterCVE-2026-1253226.5 Medium
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server login rate limiting can be evaded by a caller-supplied headerCVE-2026-1253216.5 Medium
- pgedge pgedge-postgres-mcppgEdge Postgres MCP Server did not validate the Origin header, allowing DNS rebindingCVE-2026-1253205.3 Medium
- enterprisedb pglogical, axiomthemes spock +1 morepglogical's apply worker does not sufficiently validate the length of certain fields in incoming...CVE-2026-50735Fix available6.1 Medium