{"action":"Upgrade postgresql to 9.6.6-r0 or later.","affected":[{"fixed":"9.6.6-r0","introduced":"0"}],"component":"postgresql","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.6","exploited":false,"fixed_versions":["9.6.6-r0"],"id":"tcs_01M5N97EX0X4R6GAJDQDD2WRT7","modified_at":"2026-06-15T18:24:24.635090989Z","published_at":"2017-11-22T18:29:00.583Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2017-15099","https://security.alpinelinux.org/vuln/CVE-2017-15099"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2017-15099#Alpine:v3.6/postgresql","url":"https://osv.dev/vulnerability/ALPINE-CVE-2017-15099"}],"summary":"INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits a"}