{"action":"Upgrade postgresql17 to 17.11-r0 or later.","affected":[{"fixed":"17.11-r0","introduced":"0"}],"component":"postgresql17","cve_ids":[],"ecosystem":"Alpine","ecosystem_qualifier":"Alpine:v3.22","exploited":false,"fixed_versions":["17.11-r0"],"id":"tcs_01M5NFHSWYN5FQDYQRYJK7SWPD","modified_at":"2026-10-01T02:17:49.188867698Z","published_at":"2026-08-13T13:17:45.400Z","references":["https://osv.dev/vulnerability/ALPINE-CVE-2026-14680","https://security.alpinelinux.org/vuln/CVE-2026-14680"],"severity":{"label":"high","score":8.8},"sources":[{"source":"osv","source_id":"ALPINE-CVE-2026-14680#Alpine:v3.22/postgresql17","url":"https://osv.dev/vulnerability/ALPINE-CVE-2026-14680"}],"summary":"Type confusion with PostgreSQL \"internal\" data type arguments allows any user to execute arbitrary code as the operating system user running the database, via calls to functions with that argument typ"}