CVE catalog

CVE-2026-103484

Security update for pgvector

Severity: High · CVSS 8.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published: Oct 1, 2026, 7:49:03 PM UTC
Updated: Oct 7, 2026, 5:23:11 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.42% · Oct 25, 2026

These are all security issues fixed in the pgvector-devel-0.8.7-1.1 package on the GA media of openSUSE Tumbleweed.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Opensuse	pgvector	tumbleweed	`0.8.7-1.1`	fixed
Debian	pgvector	13	`0.8.0-1`	vulnerable
Debian	pgvector	13	`0.8.1-1`	vulnerable
Debian	pgvector	13	`0.8.1-2`	vulnerable
Debian	pgvector	13	`0.8.2-1`	vulnerable
Debian	pgvector	13	`0.8.3-1`	vulnerable
Debian	pgvector	13	`0.8.4-1`	vulnerable
Debian	pgvector	13	`0.8.5-1`	vulnerable
Debian	pgvector	13	`0.8.6-1`	vulnerable
Debian	pgvector	13	`0.8.7-1`	vulnerable
Debian	pgvector	14	`0.8.0-1`	vulnerable
Debian	pgvector	14	`0.8.1-1`	vulnerable
Debian	pgvector	14	`0.8.1-2`	vulnerable
Debian	pgvector	14	`0.8.2-1`	vulnerable
Debian	pgvector	14	`0.8.3-1`	vulnerable
Debian	pgvector	14	`0.8.4-1`	vulnerable
Debian	pgvector	14	`0.8.5-1`	vulnerable
Debian	pgvector	14	`0.8.6-1`	vulnerable
Debian	pgvector	14	`0.8.7-1`	fixed
Suse	pgvector	linux enterprise module for server applications 15 sp7	`0.8.7-150600.13.12.1`	fixed
Suse	postgresql16-pgvector	linux enterprise module for server applications 15 sp7	`0.8.7-150600.13.12.1`	fixed
Suse	postgresql17-pgvector	linux enterprise module for server applications 15 sp7	`0.8.7-150600.13.12.1`	fixed
Suse	postgresql18-pgvector	linux enterprise module for server applications 15 sp7	`0.8.7-150600.13.12.1`	fixed
Suse	pgvector	linux enterprise server 15 sp6-ltss	`0.8.7-150600.13.12.1`	fixed
Suse	postgresql16-pgvector	linux enterprise server 15 sp6-ltss	`0.8.7-150600.13.12.1`	fixed
Suse	postgresql17-pgvector	linux enterprise server 15 sp6-ltss	`0.8.7-150600.13.12.1`	fixed
Suse	postgresql18-pgvector	linux enterprise server 15 sp6-ltss	`0.8.7-150600.13.12.1`	fixed
Suse	pgvector	linux enterprise server for sap applications 15 sp6	`0.8.7-150600.13.12.1`	fixed
Suse	postgresql16-pgvector	linux enterprise server for sap applications 15 sp6	`0.8.7-150600.13.12.1`	fixed
Suse	postgresql17-pgvector	linux enterprise server for sap applications 15 sp6	`0.8.7-150600.13.12.1`	fixed
Suse	postgresql18-pgvector	linux enterprise server for sap applications 15 sp6	`0.8.7-150600.13.12.1`	fixed
Suse	pgvector	linux enterprise server 16.0	`0.8.7-160000.1.1`	fixed
Suse	postgresql13-pgvector	linux enterprise server 16.0	`0.8.7-160000.1.1`	fixed
Suse	postgresql14-pgvector	linux enterprise server 16.0	`0.8.7-160000.1.1`	fixed
Suse	postgresql15-pgvector	linux enterprise server 16.0	`0.8.7-160000.1.1`	fixed
Suse	postgresql16-pgvector	linux enterprise server 16.0	`0.8.7-160000.1.1`	fixed
Suse	postgresql17-pgvector	linux enterprise server 16.0	`0.8.7-160000.1.1`	fixed
Suse	postgresql18-pgvector	linux enterprise server 16.0	`0.8.7-160000.1.1`	fixed
Suse	pgvector	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	fixed
Suse	postgresql13-pgvector	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	fixed
Suse	postgresql14-pgvector	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	fixed
Suse	postgresql15-pgvector	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	fixed
Suse	postgresql16-pgvector	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	fixed
Suse	postgresql17-pgvector	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	fixed
Suse	postgresql18-pgvector	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	fixed
Opensuse	pgvector	leap 16.0	`0.8.7-160000.1.1`	fixed
Opensuse	postgresql13-pgvector	leap 16.0	`0.8.7-160000.1.1`	fixed
Opensuse	postgresql14-pgvector	leap 16.0	`0.8.7-160000.1.1`	fixed
Opensuse	postgresql15-pgvector	leap 16.0	`0.8.7-160000.1.1`	fixed
Opensuse	postgresql16-pgvector	leap 16.0	`0.8.7-160000.1.1`	fixed
Opensuse	postgresql17-pgvector	leap 16.0	`0.8.7-160000.1.1`	fixed
Opensuse	postgresql18-pgvector	leap 16.0	`0.8.7-160000.1.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Opensuse	pgvector	rpm	tumbleweed	`0.8.7-1.1`	Not reported	OPENSUSE-SU-2026:12067-1	Not reported
Debian	pgvector	deb	14	`0.8.7-1`	Not reported	DEBIAN-CVE-2026-103484	Not reported
Suse	pgvector	rpm	linux enterprise module for server applications 15 sp7	`0.8.7-150600.13.12.1`	Not reported	SUSE-SU-2026:4804-1	Not reported
Suse	postgresql16-pgvector	rpm	linux enterprise module for server applications 15 sp7	`0.8.7-150600.13.12.1`	Not reported	SUSE-SU-2026:4804-1	Not reported
Suse	postgresql17-pgvector	rpm	linux enterprise module for server applications 15 sp7	`0.8.7-150600.13.12.1`	Not reported	SUSE-SU-2026:4804-1	Not reported
Suse	postgresql18-pgvector	rpm	linux enterprise module for server applications 15 sp7	`0.8.7-150600.13.12.1`	Not reported	SUSE-SU-2026:4804-1	Not reported
Suse	pgvector	rpm	linux enterprise server 15 sp6-ltss	`0.8.7-150600.13.12.1`	Not reported	SUSE-SU-2026:4804-1	Not reported
Suse	postgresql16-pgvector	rpm	linux enterprise server 15 sp6-ltss	`0.8.7-150600.13.12.1`	Not reported	SUSE-SU-2026:4804-1	Not reported
Suse	postgresql17-pgvector	rpm	linux enterprise server 15 sp6-ltss	`0.8.7-150600.13.12.1`	Not reported	SUSE-SU-2026:4804-1	Not reported
Suse	postgresql18-pgvector	rpm	linux enterprise server 15 sp6-ltss	`0.8.7-150600.13.12.1`	Not reported	SUSE-SU-2026:4804-1	Not reported
Suse	pgvector	rpm	linux enterprise server for sap applications 15 sp6	`0.8.7-150600.13.12.1`	Not reported	SUSE-SU-2026:4804-1	Not reported
Suse	postgresql16-pgvector	rpm	linux enterprise server for sap applications 15 sp6	`0.8.7-150600.13.12.1`	Not reported	SUSE-SU-2026:4804-1	Not reported
Suse	postgresql17-pgvector	rpm	linux enterprise server for sap applications 15 sp6	`0.8.7-150600.13.12.1`	Not reported	SUSE-SU-2026:4804-1	Not reported
Suse	postgresql18-pgvector	rpm	linux enterprise server for sap applications 15 sp6	`0.8.7-150600.13.12.1`	Not reported	SUSE-SU-2026:4804-1	Not reported
Suse	pgvector	rpm	linux enterprise server 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	postgresql13-pgvector	rpm	linux enterprise server 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	postgresql14-pgvector	rpm	linux enterprise server 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	postgresql15-pgvector	rpm	linux enterprise server 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	postgresql16-pgvector	rpm	linux enterprise server 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	postgresql17-pgvector	rpm	linux enterprise server 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	postgresql18-pgvector	rpm	linux enterprise server 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	pgvector	rpm	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	postgresql13-pgvector	rpm	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	postgresql14-pgvector	rpm	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	postgresql15-pgvector	rpm	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	postgresql16-pgvector	rpm	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	postgresql17-pgvector	rpm	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Suse	postgresql18-pgvector	rpm	linux enterprise server for sap applications 16.0	`0.8.7-160000.1.1`	Not reported	SUSE-SU-2026:24211-1	Not reported
Opensuse	pgvector	rpm	leap 16.0	`0.8.7-160000.1.1`	Not reported	OPENSUSE-SU-2026:22065-1	Not reported
Opensuse	postgresql13-pgvector	rpm	leap 16.0	`0.8.7-160000.1.1`	Not reported	OPENSUSE-SU-2026:22065-1	Not reported
Opensuse	postgresql14-pgvector	rpm	leap 16.0	`0.8.7-160000.1.1`	Not reported	OPENSUSE-SU-2026:22065-1	Not reported
Opensuse	postgresql15-pgvector	rpm	leap 16.0	`0.8.7-160000.1.1`	Not reported	OPENSUSE-SU-2026:22065-1	Not reported
Opensuse	postgresql16-pgvector	rpm	leap 16.0	`0.8.7-160000.1.1`	Not reported	OPENSUSE-SU-2026:22065-1	Not reported
Opensuse	postgresql17-pgvector	rpm	leap 16.0	`0.8.7-160000.1.1`	Not reported	OPENSUSE-SU-2026:22065-1	Not reported
Opensuse	postgresql18-pgvector	rpm	leap 16.0	`0.8.7-160000.1.1`	Not reported	OPENSUSE-SU-2026:22065-1	Not reported

OpenFactory catalog packages

[Debian 13 (Trixie)]

[postgresql-17-pgvector]Affected
Source package: [pgvector]
Details (2)
- 0.8.0-1 · amd64 · trixie
  Affected
  pypi · pgvector · debian · 13
- 0.8.0-1 · arm64 · trixie
  Affected
  pypi · pgvector · debian · 13

[openSUSE Tumbleweed]

[pgvector-devel]Unknown
Source package: [pgvector]
Details (1)
- 0.8.3-1.2 · x86_64 · tumbleweed
  Unknown · Fixed: 0.8.7-1.1
  Version impact unknown
  pypi · pgvector · opensuse · tumbleweed

Observed: Oct 23, 2026, 11:06:19 PM UTC

References

[FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]