{"id":"AZL-113699","summary":"CVE-2026-116312 affecting package postgresql 16.15-1","details":"Inconsistent transition-capture state in PostgreSQL MERGE allows a table data modifier to make an AFTER trigger process the wrong new row, via a partitioned table MERGE that performs an INSERT before an UPDATE.  Within major versions 15-18, minor versions before PostgreSQL 18.7, 17.12, 16.16, and 15.20 are affected.  Versions before PostgreSQL 15 are unaffected.","modified":"2026-11-13T14:17:11.059374084Z","published":"2026-11-12T15:17:39Z","upstream":["CVE-2026-116312"],"references":[{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116312"}],"affected":[{"package":{"name":"postgresql","ecosystem":"Azure Linux:3","purl":"pkg:rpm/azure-linux/postgresql"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"last_affected":"16.15-1"}]}],"database_specific":{"source":"https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-113699.json"}}],"schema_version":"1.9.2"}