High-Severity Flaw in PostgreSQL Allows Hackers to Exploit Environment Variables

"Incorrect control of environment variables in PostgreSQL PL/Perl allows an unprivileged database user to change sensitive process environment variables (e.g., PATH)," PostgreSQL said in an advisory.