{"action":"Upgrade postgresql14 to 10.1-r0 or later.","affected":[{"fixed":"10.1-r0","introduced":"0"}],"component":"postgresql14","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.18","exploited":false,"fixed_versions":["10.1-r0"],"id":"tcs_01M5N97G5TH2047FBF4YKVCS7J","modified_at":"2026-06-15T18:24:24.635090989Z","published_at":"2017-11-22T18:29:00.583Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2017-15099","https://security.alpinelinux.org/vuln/CVE-2017-15099"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2017-15099#Alpine:v3.18/postgresql14","url":"https://osv.dev/vulnerability/ALPINE-CVE-2017-15099"}],"summary":"INSERT ... ON CONFLICT DO UPDATE commands in PostgreSQL 10.x before 10.1, 9.6.x before 9.6.6, and 9.5.x before 9.5.10 disclose table contents that the invoker lacks privilege to read. These exploits a"}