How many PostgreSQL pg_dump CVEs are in CISA KEV?

None of PostgreSQL pg_dump's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

What are the most common weakness types in PostgreSQL pg_dump CVEs?

PostgreSQL pg_dump's CVEs most often map to these CWE weakness types: CWE-829 (Inclusion of Functionality from Untrusted Control Sphere), CWE-93 (Improper Neutralization of CRLF Sequences ('CRLF Injection')).

What is the average severity of PostgreSQL pg_dump CVEs?

The average CVSS base score across PostgreSQL pg_dump's scored CVEs is 8.8.

RadicalNotion.AI

Log in Start free

Log in

Log in Start free

PostgreSQL

2 CVEs

PostgreSQL pg_dump Vulnerabilities

Name: PostgreSQL pg_dump vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE security advisories and vulnerability history for pg_dump by PostgreSQL.

2

Total CVEs

Published

0

In CISA KEV

Exploited in the wild

0

Public exploits

PoC or exploit code

8.8

Avg CVSS

2025–2025

Last updated August 14, 2025

Overview

PostgreSQL pg_dump has 2 published CVE records since 2025, of which 0 are in CISA's Known Exploited Vulnerabilities catalog and 0 have a known public exploit. The average CVSS base score across scored CVEs is 8.8.

This page aggregates every publicly disclosed vulnerability (CVE) affecting PostgreSQL pg_dump, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of PostgreSQL pg_dump's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High2

Medium0

Low0

In CISA’s Known Exploited Vulnerabilities catalog

0

None of PostgreSQL pg_dump's CVEs are currently listed in CISA's KEV catalog.

Public exploits

0

No PostgreSQL pg_dump CVEs currently have a tracked public exploit.

Affected versions and CVEs

Browse every PostgreSQL pg_dump version named in a CVE, then pick one to see only the CVEs that affect it.

No specific affected versions are recorded for PostgreSQL pg_dump; the CVEs below apply to the product without a version pin.

2 CVEs

Sort

PostgreSQL pg_dump newline in object name executes arbitrary code in psql client and in restore target server
CVE-2025-8715
Patch
Workaround
CWE-93
High · CVSS 8.8
EPSS 0.4% (33th pct)2025-08-14
PostgreSQL pg_dump lets superuser of origin server execute arbitrary code in psql client
CVE-2025-8714
Patch
Workaround
CWE-829
High · CVSS 8.8
EPSS 0.7% (50th pct)2025-08-14

Common weakness types

The CWE weakness categories most often found in PostgreSQL pg_dump CVEs. Follow any weakness for its full explanation.

Frequently asked questions

Common questions about PostgreSQL pg_dump vulnerabilities.

How many CVEs does PostgreSQL pg_dump have?: PostgreSQL pg_dump has 2 published CVE records since 2025.
How many PostgreSQL pg_dump CVEs are in CISA KEV?: None of PostgreSQL pg_dump's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.
Are there public exploits for PostgreSQL pg_dump vulnerabilities?: No PostgreSQL pg_dump CVEs currently have a tracked public exploit in this dataset.
What are the most common weakness types in PostgreSQL pg_dump CVEs?: PostgreSQL pg_dump's CVEs most often map to these CWE weakness types: CWE-829 (Inclusion of Functionality from Untrusted Control Sphere), CWE-93 (Improper Neutralization of CRLF Sequences ('CRLF Injection')).
What is the average severity of PostgreSQL pg_dump CVEs?: The average CVSS base score across PostgreSQL pg_dump's scored CVEs is 8.8.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track PostgreSQL pg_dump vulnerabilities

Monitor new PostgreSQL pg_dump vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing