pgvector vulnerabilities
CVEs whose affected-version data names the pgvector package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-103484High· 8.8IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.
IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.
▾ TwilightRed Hat · pgvectorEPSS 0.42%via NVD
CVE-2026-18022High· 8.8pgvector: pgvector: Arbitrary Code Execution via Integer Wraparound (CVE-2026-18022)
A flaw was found in pgvector. An integer wraparound vulnerability exists during the IVFFlat index build process. This flaw allows a database user on a 32-bit system to write data outside of allocated memory buffers. Successful exploitation…
▾ TwilightRed Hat · pgvectorEPSS 0.60%via CSAF