Robins Tharakan: Postgres May 2026 Security Update: 11 CVEs, All Versions Affected (opens in new tab)

It's that time again. The upcoming Postgres v18.4 release (along with minor releases for all Major versions) has dropped some serious hints in the git logs, and it's bringing a significant payload of CVE tagged patches. As a seasoned Postgres end-user and an erstwhile DBA, whenever I see a flurry of high-vulnerability security commits, I immediately start recommending that customers begin planning their patching cycles. (Note: As these patches are hot off the press, official CVSS scores and d...