11 verified briefings on PostgreSQL. Each story includes a plain-English summary, why it matters, and the concrete action engineering teams should take.
A new service from PGX offers security patches and bug fixes for old, unsupported versions of PostgreSQL. This helps companies that can't upgrade stay secure and maintain data integrity without a costly migration.
HypoPG, a popular PostgreSQL extension for testing "hypothetical" indexes without the cost of building them, has a new update. Version 1.4.3 fixes a long-standing bug and adds early support for the upcoming PostgreSQL 19.
The PostgreSQL Workload Analyzer (PoWA) project has released version 5.1.2 of its core tool, powa-archivist. This update provides incremental improvements for developers and IT teams who use it to monitor database performance.
The new version of PostgreSQL Anonymizer introduces Local Differential Privacy, a sophisticated technique for data masking. This gives developers a more robust way to protect sensitive user information without compromising data utility.
A stored cross-site scripting (XSS) vulnerability has been found in Appsmith's SQL query editor. Attackers with developer access to a shared PostgreSQL database can inject malicious code by creating specially named database objects. This code executes when the autocomplete feature is used by other users.
Microsoft has open-sourced a new tool for PostgreSQL called pg_durable. It allows developers to run complex workflows directly inside the database, which can simplify system design by removing the need for external orchestration tools.
AWS has released ExtendDB, an open-source tool that lets developers use the popular DynamoDB API with other databases, starting with PostgreSQL. This offers more flexibility and helps avoid being locked into a single cloud vendor.
The first beta for PostgreSQL 19 is now available for download and testing. This early release provides a preview of new features and improvements coming in the next major version of the popular open-source database. It allows developers and IT teams to begin evaluating the update.
Autobase, an open-source PostgreSQL platform, has released version 2.8, introducing a new commercial Enterprise Edition. The existing free version is now the Community Edition. This move provides a new option for businesses seeking managed database solutions as an alternative to traditional cloud-based Database-as-a-Service (DBaaS) offerings.
Drupal has issued security updates for a highly critical vulnerability in its Core software, tracked as CVE-2026-9082. The flaw affects sites using a PostgreSQL database and could allow attackers to execute remote code, escalate privileges, or access sensitive information. Immediate patching is strongly recommended.
A new version of pg_sorted_heap, a PostgreSQL extension, has been released. It introduces physically sorted storage and integrated vector search. Version 0.14.0 adds official support for PostgreSQL 16 and is now available on the PostgreSQL Extension Network (PGXN) for easier installation and management.