What is GHSA-pw7q-9788-x566?

GHSA-pw7q-9788-x566 is a security advisory published by GitHub Security Advisories with High severity. IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds,...

Which CVE IDs does GHSA-pw7q-9788-x566 cover?

GHSA-pw7q-9788-x566 covers the following CVE IDs: CVE-2026-103484. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pw7q-9788-x566?

GHSA-pw7q-9788-x566 has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-pw7q-9788-x566HighCVSS 8.8

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds,...

Vendor

GitHub Security Advisories

Published

October 1, 2026

Last Modified

October 1, 2026

🔗 CVE IDs covered (1)

CVE-2026-103484 →

📋 Description

IVFFlat index build in pgvector before 0.8.7 allows a database user to write data out-of-bounds, which can lead to arbitrary code execution.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-103484
https://github.com/pgvector/pgvector/issues/1036
https://github.com/pgvector/pgvector/commit/ee00d39ab30c2a7cf9510abf9288c624d91db156
https://github.com/advisories/GHSA-pw7q-9788-x566