CVE-2026-58225: postgrex 0.16.0 to before 0.22.3

Affected technology

postgrex · 0.16.0 to before 0.22.3
elixir-ecto

postgrex · 266b530faf9bde094e31e0e4ab851f933fadc0f5 to before 795c6062f62c4394272ff4b89170688857b4f841
elixir-ecto

Component: 'Elixir.Postgrex.Notifications'
Function: 'Elixir.Postgrex.Notifications':handle_connect/1, 'Elixir.Postgrex.Notifications':listen/3
File: lib/postgrex/notifications.ex

Attack conditions (Source advisory, CVSS 4.0): Local · No privileges required · No user interaction required

What an attacker can do

The source reports that an attacker could disrupt service under the conditions described by the source. Source advisory’s CVSS 4.0 assessment (base score 2.1/10) rates confidentiality and integrity impact as none; availability impact as low.