electric_postgres_sync vulnerabilities

CVEs whose affected-version data names the electric_postgres_sync package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-65314Medium· 4.3

2mo ago

Electric Postgres Sync Excluded-Column Value Inference via Subset Where Clauses

Electric Postgres Sync versions below 1.6.10 contains an information disclosure vulnerability that allows attackers to infer the values of excluded columns by crafting subset where clause conditions against shape responses. Attackers can…

▾ SunlitElectricSQL · Electric Postgres SyncEPSS 0.39%via CVEORG