CVE-2025-58450 – pREST has Systemic SQL Injection Vulnerability

CVE ID : CVE-2025-58450

Published : Sept. 8, 2025, 10:15 p.m. | 39 minutes ago

Description : pREST (PostgreSQL REST), is an API that delivers an application on top of a Postgres database. SQL injection is possible in versions prior to 2.0.0-rc3. The validation present in versions prior to 2.0.0-rc3 does not provide adequate protection from injection attempts. Version 2.0.0-rc3 contains a patch to mitigate such attempts.

Severity: 9.3 | CRITICAL

Visit the link for more details, such as CVSS details, affected products, timeline, and more…