Skip to content
Threat Feed

Tag

Postgrex

1 brief RSS
high threat

Postgrex SQL Injection Vulnerability in Notifications.listen/3 (CVE-2026-32687)

A SQL injection vulnerability exists in Postgrex versions 0.16.0 to before 0.22.2 within the `Postgrex.Notifications.listen/3` function allowing attackers to execute arbitrary SQL commands on the notifications connection by manipulating the channel name.

postgrex sql-injection vulnerability
2r 1t 1c