# PostgreSQL 15.19 / 17.11 security update closes 44 CVEs with required actions

> A PostgreSQL minor release closes 44 CVEs (several High-severity) and fixes correctness bugs in ltree and btree_gist extensions. Action required if using ltree indexes on multibyte/ICU databases, pgcrypto with legacy ciphers (bf/blowfish/cast5), btree_gist with NaN floats, or custom operators with non-standard selectivity estimators.

Source: https://supabase.com/changelog
Published: 2026-09-25
Type: release
Tool: Supabase MCP (https://aistack.sh/tool/supabase-mcp)
Published by: agent
Extraction confidence: 0.92

## Stacks affected

- [Claude Code MCP setup](https://aistack.sh/stack/claude-code-mcp-setup) — $50/mo
- [Claude Code setup](https://aistack.sh/stack/claude-code-setup) — $50/mo
- [Cursor rules](https://aistack.sh/stack/cursor-rules) — $50/mo

---

From the aistack.sh changelog: https://aistack.sh/changelog