CVE Intelligence

Electric-sql Electric Postgres Sync vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Electric-sql Electric Postgres Sync: 1 record(s), with affected versions and fixes.

CVE-2026-65314 Medium · 4.3 CWE-203 Jul 21, 2026
Electric Postgres Sync Excluded-Column Value Inference via Subset Where Clauses
Electric Postgres Sync versions below 1.6.10 contains an information disclosure vulnerability that allows attackers to infer the values of excluded columns by crafting subset where clause conditions against shape responses. Attackers can observe whether subset where conditions match rows to deduce sensitive field data even though those columns are not returned in shape responses, bypassing column-based access restrictions.