Memory disclosure and missing authorization in INSERT ... ON CONFLICT DO UPDATE.

Version Information

Affected Version Fixed In Fix Published
10 10.5 2018-08-09
9.6 9.6.10 2018-08-09
9.5 9.5.14 2018-08-09

For more information about PostgreSQL versioning, please visit the versioning page.

CVSS 3.0

Overall Score 7.1
Component core server
Vector AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

Reporting Security Vulnerabilities

If you wish to report a new security vulnerability in PostgreSQL, please send an email to

For reporting non-security bugs, please see the Report a Bug page.