Schedule - PGConf.dev 2026

Give feedback to the PostgreSQL Security Team

Level: Intermediate

The PostgreSQL Security Team receives vulnerability reports, looks for similar defects, completes the fixes, and publishes CVE details. We're calling this session to hear your feedback on how we can do better. Questions to think about:

  • When you compare the PostgreSQL vulnerability lifecycle to organizations that handle vulnerabilities better, what is different?
  • When has a PostgreSQL vulnerability or vulnerability fix created unusual problems for you? What made it bad?
  • If making a new RDBMS, what would you avoid copying from the PostgreSQL security model?

Speaker

Noah Misch