timescale records
6 published records for vendor timescale.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 0
- With a fix record
- 33.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-125 Out-of-bounds Read3
- CWE-284 Improper Access Control1
- CWE-426 Untrusted Search Path1
- CWE-863 Incorrect Authorization1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
6 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2023-25149No exploit | TimescaleDB has incorrect access controltimescale · timescaledb · CWE-284 | High8.8 | — | 0.7% | Feb 14, 2023 |
35Monitor | CVE-2026-29089No exploit | TimescaleDB uses untrusted search path during extension upgradetimescale · timescaledb · CWE-426 | High8.8 | — | 0.1% | Mar 6, 2026 |
32Monitor | CVE-2022-24128No exploit | Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during extension installation.timescale · timescaledb · CWE-863 | High8.0 | — | 0.9% | Mar 13, 2022 |
28Monitor | CVE-2026-70634No exploit | TimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iteratortimescale · timescaledb · CWE-125 | High7.2 | — | 0.5% | Aug 6, 2026 |
28Monitor | CVE-2026-70633No exploit | TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Gorilla Compression Reverse Iteratortimescale · timescaledb · CWE-125 | High7.1 | — | 0.5% | Aug 6, 2026 |
28Monitor | CVE-2026-70635No exploit | TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Indextimescale · timescaledb · CWE-125 | High7.1 | — | 0.4% | Aug 6, 2026 |
- CVE-2023-2514935Monitor
TimescaleDB has incorrect access control
HighCVSS 8.8No exploitEPSS 0%timescale · timescaledbFeb 14, 2023
- CVE-2026-2908935Monitor
TimescaleDB uses untrusted search path during extension upgrade
HighCVSS 8.8No exploitEPSS 0%timescale · timescaledbMar 6, 2026
- CVE-2022-2412832Monitor
Timescale TimescaleDB 1.x and 2.x before 2.5.2 may allow privilege escalation during extension installation.
HighCVSS 8.0No exploitEPSS 0%timescale · timescaledbMar 13, 2022
- CVE-2026-7063428Monitor
TimescaleDB 2.29.1 Out-of-Bounds Read Information Disclosure via Dictionary Compression Reverse Iterator
HighCVSS 7.2No exploitEPSS 0%timescale · timescaledbAug 6, 2026
- CVE-2026-7063328Monitor
TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Gorilla Compression Reverse Iterator
HighCVSS 7.1No exploitEPSS 0%timescale · timescaledbAug 6, 2026
- CVE-2026-7063528Monitor
TimescaleDB 2.29.1 Out-of-Bounds Read DoS via Bulk Dictionary Decompression Negative Index
HighCVSS 7.1No exploitEPSS 0%timescale · timescaledbAug 6, 2026