PostGIS memory-corruption bug weaponized for code execution at Supabase, NeonDB, Xata
A researcher turned a memory-corruption flaw in PostGIS, the ubiquitous Postgres geospatial extension, into privilege escalation and code execution across managed-Postgres providers NeonDB, Supabase, Xata, and others. Part one of a series documenting 40+ extension vulnerabilities and systemic extension-supply-chain risk in the managed Postgres industry.