timescale

Products

Exploited and recent CVEs

• CVE-2026-116489 High 7.5 Timescale pgvectorscale before 0.9.1 Type Confusion via Unqualified DiskANN Operator Classes 0.5%
• CVE-2026-81100 Medium 6.8 Timescale tiger-gh-mcp-server DNS Rebinding via Disabled Host Header Allow-List 0.2%
• CVE-2026-81099 Medium 6.8 Timescale tiger-slack DNS Rebinding via Disabled Host Header Allow-List 0.2%
• CVE-2026-81095 Medium 6.8 Timescale pg-aiguide through 0.5.0 DNS Rebinding via Disabled Host Header Allow-List 0.2%
• CVE-2026-70635 High 7.1 TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index 0.4%
• CVE-2026-70634 High 8.1 TimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iterator 0.5%
• CVE-2026-70633 Medium 6.5 TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Gorilla Compression Reverse Iterator 0.5%
• CVE-2026-29089 High 8.8 TimescaleDB uses untrusted search path during extension upgrade 0.2%
• CVE-2025-52467 Critical 9.1 pgai secrets exfiltration via `pull_request_target` 0.4%
• CVE-2023-25149 High 8.8 TimescaleDB has incorrect access control 0.8%