PostgreSQL security advisory (AV25-084)

Serial number: AV25-084
Date: February 17, 2025

On February 13, 2025, PostgreSQL published a security advisory to address a vulnerability in the following product:

• PostgreSQL – 13.x versions prior to 13.19, 14.x versions prior to 14.16, 15.x versions prior to 15.11, 16.x versions prior to 16.7 and 17.x versions prior to 17.3

Open-source reporting has advised that CVE-2025-1094 may have been exploited.

The Cyber Centre encourages users and administrators to review the provided web link and perform the suggested mitigations.

• PostgreSQL Advisory - quoting APIs miss neutralizing quoting syntax in text that fails encoding validation