Matthieu Denais

**Name of the Vulnerable Software and Affected Versions** PostgreSQL versions prior to 17.6 PostgreSQL versions prior to 16.10 PostgreSQL versions prior to 15.14 PostgreSQL versions prior to 14.19 PostgreSQL versions prior to 13.22 **Description** Untrusted data inclusion in the `pg dump` utility allows a malicious superuser of the origin server to inject arbitrary code. This code is executed during the restore process as the client operating system account running `psql` to restore the dump, achieved through the use of `psql` meta-commands. The `pg dumpall` utility is also affected, as is `pg restore` when it is used to generate a plain-format dump. **Recommendations** Update to version 17.6 Update to version 16.10 Update to version 15.14 Update to version 14.19 Update to version 13.22

**Name of the Vulnerable Software and Affected Versions** Oracle MySQL versions 8.0.0 through 8.0.42 Oracle MySQL versions 8.4.0 through 8.4.5 Oracle MySQL versions 9.0.0 through 9.3.0 **Description** A difficult-to-exploit issue exists in the MySQL Client component (mysqldump) of Oracle MySQL. Successful attacks require human interaction from a person other than the attacker and network access via multiple protocols. Exploitation can lead to unauthorized data modification (update, insert, delete) and read access to some MySQL Client accessible data. **Recommendations** Oracle MySQL versions prior to 8.0.43 Oracle MySQL versions prior to 8.4.6 Oracle MySQL versions prior to 9.3.1