Back to Database
Status published
Critical
CVE-2025-58450
pREST has Systemic SQL Injection Vulnerability
Vulnerability Description
pREST (PostgreSQL REST), is an API that delivers an application on top of a Postgres database. SQL injection is possible in versions prior to 2.0.0-rc3. The validation present in versions prior to 2.0.0-rc3 does not provide adequate protection from injection attempts. Version 2.0.0-rc3 contains a patch to mitigate such attempts.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-58450
Credits & Attribution
No credits recorded in the NVD database.
Affected Vendor
prest
View all reports →Affected Software
prest
Vulnerable Versions:
< 2.0.0-rc3
Timeline
Official Publish:
September 8th, 2025
Last Modified:
September 9th, 2025
Added to House:
July 22nd, 2026