PostgreSQL
Safeguard articles tagged "PostgreSQL" — guides, analysis, and best practices for software supply chain and application security.
3 articles
PostgreSQL 14 End of Life on 12 November 2026: What 2026 Fixed and How to Upgrade
PostgreSQL 14's final release is due on 12 November 2026. This year it needed fixes for 36 CVEs, 22 rated 8.0 or higher. The community and Amazon RDS dates that apply, two security defaults a 14-to-18 upgrade doesn't change for you, and a script that finds every pinned PostgreSQL version in a repository.
PgBouncer CVE-2026-107350: How a Second Startup Message Let One Password Log In as Any SCRAM User
PgBouncer 1.26.1 fixes an authentication bypass present since 1.17.0: anyone who knows one auth_file user's password could log in as any other SCRAM user, including admins and database superusers.
Database Extensions as Supply Chain Risk: The Overlooked Attack Surface
PostgreSQL extensions, MySQL plugins, and database add-ons run with database-level privileges. A compromised extension has direct access to your data. Most organizations never audit them.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.