Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.

PostgreSQL 16 could let attackers read data

published 1 month ago

Summary

The PostgreSQL 16 package version 16.9 contains a security weakness that could allow an unauthorized user to view database information. The problem is fixed in newer releases of the software. Update PostgreSQL to the latest available version to protect your data.

What to do

Update cleanstart postgresql16 to version 16.9-r0.

Affected software

Ecosystem	Vendor	Product	Affected versions
CleanStart	cleanstart	postgresql16	< 16.9-r0 Fix: upgrade to 16.9-r0

Original advisory text

Security fix for CVE-2025-4207 applied in: postgresql16 16.9-r0

Security vulnerability affects the postgresql16 package. This issue is resolved in later releases. See references for vulnerability details.

References

https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advis... Vendor Advisory
https://osv.dev/vulnerability/CVE-2025-4207 URL
https://nvd.nist.gov/vuln/detail/CVE-2025-4207 URL

Timeline

Published18 Sep 2026

Updated18 Sep 2026

First seen18 Sep 2026

Sources

CLEANSTART-2026-PL37592 · OSV

Track software like this

Free during beta