JLSEC-2026-28

See a problem?
Please try reporting it to the source first.

Source

https://github.com/JuliaLang/SecurityAdvisories.jl/blob/main/advisories/published/2026/JLSEC-2026-28.md

Import Source

https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-28.json

JSON Data

https://api.test.osv.dev/v1/vulns/JLSEC-2026-28

Upstream

CVE-2020-25696

Published

2026-04-03T13:27:15.647Z

Modified

2026-04-03T13:30:28.092082Z

Summary

[none]

Details

A flaw was found in the psql interactive terminal of PostgreSQL in versions before 13.1, before 12.5, before 11.10, before 10.15, before 9.6.20 and before 9.5.24. If an interactive psql session uses \gset when querying a compromised server, the attacker can execute arbitrary code as the operating system account running psql. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Database specific

{
    "license": "CC-BY-4.0",
    "sources": [
        {
            "imported": "2026-04-03T13:13:09.745Z",
            "id": "CVE-2020-25696",
            "published": "2020-11-23T22:15:12.257Z",
            "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2020-25696",
            "modified": "2024-11-21T05:18:30.003Z",
            "html_url": "https://nvd.nist.gov/vuln/detail/CVE-2020-25696"
        }
    ]
}

References

Affected packages

Julia / LibPQ_jll

Package

Name: LibPQ_jll
Purl: pkg:julia/LibPQ_jll?uuid=08be9ffa-1c94-5ee5-a977-46a84ec9b350

Affected ranges

Type: SEMVER
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

14.1.0+0

Database specific

source

"https://github.com/JuliaLang/SecurityAdvisories.jl/tree/generated/osv/2026/JLSEC-2026-28.json"